Udemy - Ethical Hacking Penetration Testing & Bug Bounty Hunting

[0dayddl]

6.34 GB | 19min 23s | mp4 | 1920X1080 | 1.6:1
Genre:eLearning |Language:English​

Files Included :

Spoiler

002 Course Introduction.mp4 (50.49 MB)
003 Disclaimer.mp4 (2.54 MB)
005 What is OWASP and Injection.mp4 (78.32 MB)
006 What is Broken Authentication.mp4 (26.33 MB)
007 What is Sensitive Data Exposure.mp4 (25.09 MB)
008 What is XML External Entities.mp4 (14.62 MB)
009 What is Broken Access Control.mp4 (31.91 MB)
010 What is Security Misconfiguration.mp4 (9.63 MB)
011 What is Cross Site Scripting (XSS).mp4 (30.82 MB)
012 What is Insecure Deserialization.mp4 (6.49 MB)
013 What is Using Components with Known Vulnerabilities.mp4 (7.45 MB)
014 What is Insufficient Logging and Monitoring.mp4 (14.01 MB)
016 Burp Suite Proxy Lab Setup.mp4 (201.98 MB)
018 Authentication Bypass Exploitation Live -1.mp4 (27.68 MB)
019 Authentication Bypass Exploitation Live -2.mp4 (87.17 MB)
020 Authentication Bypass Exploitation Live -3.mp4 (34.27 MB)
021 Authentication Bypass Exploitation Live -4.mp4 (29.11 MB)
022 Authentication Bypass Exploitation Live -5.mp4 (20.96 MB)
023 Authentication Bypass Exploitation Captcha.mp4 (17.01 MB)
024 Authentication Bypass to Account Takeover Live -1.mp4 (28.38 MB)
025 Authentication Bypass to Account Takeover Live -2.mp4 (28.56 MB)
026 Authentication Bypass due to OTP Exposure Live -1.mp4 (69.4 MB)
027 Authentication Bypass due to OTP Exposure Live -2.mp4 (17.23 MB)
028 Authentication Bypass 2FA Bypass Live.mp4 (24.75 MB)
029 Authentication Bypass - Email Takeover Live.mp4 (50.37 MB)
030 Authentication Bypass Mitigations.mp4 (7.25 MB)
031 Authentication Bypass Interview Questions and Answers.mp4 (16.16 MB)
033 No Rate-Limit leads to Account Takeover Live Type-1.mp4 (194.66 MB)
034 NO RL Alternative Tools Introduction.mp4 (6.32 MB)
035 No Rate-Limit leads to Account Takeover Live Type -2.mp4 (71.19 MB)
036 No Rate-Limit leads to Account Takeover Live Type -3.mp4 (84.38 MB)
037 No Rate-Limit leads to Account Takeover Live Type -4.mp4 (68.59 MB)
038 No Rate-Limit leads to Account Takeover Live Type -5.mp4 (39.79 MB)
039 No Rate-Limit to Account Takeover Live - Type 6.mp4 (25.03 MB)
040 No Rate-Limit to Account Takeover Live - Type 7.mp4 (38.18 MB)
041 No Rate-Limit Instagram Report Breakdown.mp4 (3.56 MB)
042 No Rate-Limit Instagram Report Breakdown 2.mp4 (33.23 MB)
043 No Rate Limit Bypass Report Breakdown.mp4 (26.08 MB)
044 No Rate Limit Bypass Report Breakdown 2.mp4 (56.55 MB)
045 No Rate-Limit to Tool Fake IP Practical.mp4 (60.87 MB)
046 No Rate-Limit test on CloudFare.mp4 (51.53 MB)
047 No Rate-Limit Mitigations.mp4 (6.86 MB)
048 No Rate-Limit All Hackerone Reports Breakdown.mp4 (31.72 MB)
049 Burp Alternative OWASP ZAP Proxy for No RL.mp4 (81.17 MB)
051 How XSS Works.mp4 (34.63 MB)
052 Reflected XSS on Live 1.mp4 (32.23 MB)
053 Reflected XSS on Live 2.mp4 (9.3 MB)
054 Reflected XSS on Live Manual Balancing.mp4 (181.17 MB)
055 Reflected XSS on Live 3 Balanced.mp4 (20.27 MB)
056 XSS on Limited Inputs Live 1.mp4 (40.97 MB)
057 XSS on Limited Inputs Live 2.mp4 (17.34 MB)
058 XSS in Request Headers - Live.mp4 (29.8 MB)
059 Reflected XSS Useragent and Caching.mp4 (33.37 MB)
060 Reflected XSS Email Validator Live.mp4 (29.47 MB)
061 Reflected XSS Protection Bypass Live 1 - Base64.mp4 (63.49 MB)
062 Reflected XSS Protection Bypass Live -2.mp4 (32.18 MB)
063 XSS using Spider.mp4 (49.72 MB)
064 XSS Bypass Right Click Disabled.mp4 (25.22 MB)
065 Blind XSS Exploitation.mp4 (48.83 MB)
066 Stored XSS Exploitation Live.mp4 (147.05 MB)
067 DOM XSS Name.mp4 (29.27 MB)
068 DOM XSS Redirect.mp4 (8.58 MB)
069 DOM XSS Index.mp4 (9.73 MB)
070 DOM XSS Automated Scanner.mp4 (224.95 MB)
071 XSS on Live by Adding Parameters.mp4 (50.24 MB)
072 XSS Mouse on Lab.mp4 (10.27 MB)
073 XSS Mouse Live.mp4 (8.15 MB)
074 XSS Mouse Events All Types.mp4 (68.75 MB)
075 XSS Polyglots Live.mp4 (116.93 MB)
076 XSS Polyglots Breakdown.mp4 (9.99 MB)
077 XSS Exploitation - URL Redirection.mp4 (49.61 MB)
078 XSS Exploitation - Phishing.mp4 (24.87 MB)
079 XSS Exploitation Cookie Stealer Lab.mp4 (54.18 MB)
080 XSS Exploitation Cookie Stealer Live.mp4 (128.08 MB)
081 XSS Exploitation File Upload Type -2.mp4 (33.03 MB)
082 XSS Exploitation File Upload Type -3.mp4 (62.51 MB)
083 XSS Exploitation File Upload Type- 1.mp4 (44.88 MB)
084 XSS Mitigations.mp4 (10.3 MB)
085 XSS Bonus TIPS and TRICKS.mp4 (30.01 MB)
086 XSS Hackerone ALL Reports Breakdown.mp4 (117.91 MB)
087 XSS Interview Questions and Answers.mp4 (30.34 MB)
090 How CSRF Works.mp4 (15.53 MB)
091 CSRF Alternative Tools Introduction.mp4 (9.24 MB)
092 CSRF on LAB.mp4 (31.61 MB)
093 CSRF on LAB - 2.mp4 (97.61 MB)
094 CSRF on Live -1.mp4 (14.39 MB)
095 CSRF on Live -2.mp4 (152.36 MB)
096 CSRF Password Change Lab.mp4 (53.42 MB)
097 CSRF Funds Transfer Lab.mp4 (28.96 MB)
098 CSRF Request Methods Trick - Lab.mp4 (29.77 MB)
099 CSRF to Account Takeover Live -1.mp4 (110.71 MB)
100 CSRF to Account Takeover Live -2.mp4 (120.67 MB)
101 Chaining CSRF with XSS.mp4 (10.25 MB)
102 CSRF Mitigations.mp4 (11.82 MB)
103 CSRF BONUS Tips and Tricks.mp4 (8.66 MB)
104 CSRF ALL Hackerone Reports Breakdown.mp4 (181.11 MB)
105 CSRF Interview Questions and Answers.mp4 (23.36 MB)
106 Alternative to Burpsuite for CSRF CSRF PoC Generator.mp4 (117.02 MB)
108 How CORS Works.mp4 (9.81 MB)
109 CORS 3 Test Cases Fundamentals.mp4 (92.76 MB)
110 CORS Exploitation Live -1 Exfiltration of Account Details.mp4 (13.56 MB)
111 CORS Exploitation Live -2 Exfiltration of Account Details.mp4 (17.91 MB)
112 CORS Live Exploitation -3.mp4 (6.11 MB)
113 CORS Exploitation Facebook Live.mp4 (19.54 MB)
114 CORS Live Prefix Match.mp4 (31.57 MB)
115 CORS Live Suffix Match.mp4 (31.69 MB)
116 CORS Mitigations.mp4 (5.75 MB)
117 CORS Breakdown of ALL Hackerone Reports.mp4 (117.38 MB)
119 BugCrowd ROADMAP.mp4 (254.51 MB)
120 Hackerone ROADMAP.mp4 (95.41 MB)
121 Open Bug Bounty ROADMAP.mp4 (140.47 MB)
122 NCIIPC Govt of Inida ROADMAP.mp4 (156.15 MB)
123 RVDP All Websites ROADMAP.mp4 (50.36 MB)
126 Exploitation.mp4 (132.41 MB)
127 Assets & Resources.mp4 (110.44 MB)
128 Final Words.mp4 (19.09 MB)
129 Exploitation of CVE 2020-3452 File Read.mp4 (310.35 MB)
130 Exploitation of CVE 2020-3187 File Delete.mp4 (106.89 MB)

]
Screenshot

Spoiler

Bitte Anmelden oder Registrieren um Code Inhalt zu sehen!

 

[0dayddl]

Ethical Hacking / Penetration Testing & Bug Bounty Hunting
MP4 | Video: h264, 1280x720 | Audio: AAC, 44.1 KHz
Language: English (US) | Size: 3.59 GB | Duration: 11h 3m​

Complete Practical Course on Ethical Hacking, Penetration Testing and Bug Bounty Hunting with Live Attacks

What you'll learn
OWASP 10 and Fundamentals
OWASP Top 10 2013 vs 2017
Bug Bounty Hunting - Live
Tips and Tricks to hunt bugs
BreakDown of Hackerone Reports for better understanding
Interview Preparation Questions Answers and Approach
Web Application Penetration Testing - Live
Become a bug bounty hunters & Hunt on Live Websites
Intercept requests using a Burpsuite proxy
Gain full control over target server using Authentication Bypass Attacks
Gain full control over target server using Captcha Bypass Attacks
Gain full control over target server using OTP /2FA Bypass Attacks
Discover Vulnerabilities, technologies & services used on target website.
Authentication Bypass Interview Questions and Answers
Hunt Basic XSS Vulnerabilities on Live Environments
Exploit and perform Acccount Takeovers on Live websites
Authentication Bypass Mitigations and Fixes
Authentication Bypass Breakdown of Hackerone Reports
Breakdown of No-Rate Limit of all Hackerone Reports by Hackers
Hunt Advance XSS Vulnerabilities by Filter and WAF Bypass
Hunt Vulnerabilities and Bug Bounty using XSS vulnerabilities.
Fix and Mitigations against XSS Vulnerabilities
Authentication Bypass Bonus Tips and Tricks
Practical Tips and Tricks for hunting XSS Live
Breakdown of XSS of all Hackerone Reports by Hackers
Interview Questions and Answers for XSS Attacks
Gain full control over target server using CSRF Attacks
Hunt Vulnerabilities using Advance CSRF Techniques
Perform Complete Account Takeover using CSRF on Lab
Perform Complete Account Takeover using CSRF on Live
Hunt Advance CSRF Vulnerabilities by Filter Bypass
Fix and Mitigations against CSRF Vulnerabilities
Practical Tips and Tricks for hunting CSRF Live
Breakdown of CSRF of all Hackerone Reports by Hackers
Interview Questions and Answers for CSRF Attacks
Gain full control over target server using CORS Attacks
Hunt Vulnerabilities using Advance CORS Techniques
Exfiltrating Sensitive Information by CORS Vulnerabiltiy
Fix and Mitigations against CORS Vulnerabilities
Practical Tips and Tricks for hunting CORS Live
Breakdown of CORS of all Hackerone Reports by Hackers
Hunt Vulnerabilities using No Rate-Limit Techniques
Complete Account Takeover at by No Rate-Limit Vulnerability
Fix and Mitigations against No Rate-Limit Vulnerabilities
Practical Tips and Tricks for hunting No Rate-Limit Live
Interview Questions and answers of CORS
Bug Bounty - Roadmap for Hackerone
Bug Bounty - Roadmap for Bugcrowd
Bug Bounty - Roadmap for OpenBugBounty
Bug Bounty - Roadmap for NCIIPC (Govt of India)
Bug Bounty - Roadmap for RVDP All Programs
Reporting Templates
Live Shodan Hunting
Live CVE Hunting

Requirements
Basic IT Skills
No Linux, programming or hacking knowledge required.
Computer with a minimum of 4GB ram/memory & Internet Connection
Operating System: Windows / OS X / Linux

Description
Welcome to Ethical Hacking / Penetration Testing and Bug Bounty Hunting Course. This course covers web application attacks and how to earn bug bounties. There is no prerequisite of prior hacking knowledge and you will be able to perform web attacks and hunt bugs on live websites and secure them.This course is not like other hacking or penetration testing course with outdated vulnerabilities and only lab attacks. This contains maximum live websites to make you comfortable with the Live Hunting Environment.This course will start from basic principles of each vulnerability and How to attack them using multiple bypass techniques, In addition to exploitation, you will also learn how to fix them.This course is highly practical and is made on Live websites to give you the exact environment when you start your penetrating testing or bug hunting journey.We will start from the basics of OWASP to the exploitation of vulnerabilities leading to Account Takeover on live websites.This course is divided into a number of sections, each section covers how to hunt, exploit and mitigate a vulnerability in an ethical manner.After identification of a vulnerability, we will exploit to leverage the maximum severity out of it. We will also learn how to fix vulnerabilities which are commonly found on the websites on the internet.In this course, you will also learn How can you start your journey on many famous bug hunting platforms like Bugcrowd, Hackerone and Open Bug Bounty.Along with this, you will be able to hunt and report vulnerabilities to NCIIPC Government of India, also to private companies and to their responsible disclosure programs.You will also learn Advance techniques to bypass filters and the developers logic for each kind of vulnerability. I have also shared personal tips and tricks for each attacks where you can trick the application and find bugs quickly.This course also includes the Breakdown of all Hackerone Reports which are found and submitted by other hackers for better understanding as we will cover each type of technique in the course.This course also includes important interview questions and answers which will be helpful in any penetrating testing job interview.Here's a more detailed breakdown of the course content:In all the sections we will start the fundamental principle of How the attack works, Exploitation and How to defend from those attacks.In OWASP, We will cover what is OWASP and Top 10 vulnerabilities.We will also understand what is the difference between owasp 2013 vs 2017.1. In Cross site scripting XSS, we will cover all diff types of attacks like Reflected XSS, Stored XSS and DOM XSS. In addition, we will learn Advance Exploitation for Limited Inputs and Filter Bypass.We will see all the types of XSS attacks on live websites which will give you a better understanding of the live environment when you will start your bug hunting journey.We will also cover different ways to perform XSS Exploitation using multiple types of payloads like Phishing, File Upload, Cookie Stealing and Redirection.We will also see the exploitation of Blind XSS which generally other researchers miss out.This course also includes a breakdown of all the Hackerone reports submitted by other hackers for XSS type of vulnerability wherein we will see and practice all types of attacks in our course.In the end, we will also cover mitigations to secure a website and prevent these types of attacks.In the end, I have added Interview Questions and answers which be helpful for you when XSS questions are asked in any job or internship.2. In Authentication Bypass, we will cover all diff types of ways to attack like OTP Bypass, 2FA Bypass, Captcha bypass, Email Verification Bypass etc. So we will perform all the ways to attack protection on websites.We will see all the types of Authentication bypass on live websites which will give you a better understanding of the live environment when you will start your bug hunting journey.We will also cover different ways to perform Auth Bypass Exploitation using different techniques.This course also includes a breakdown of all the Hackerone reports submitted by other hackers for Authentication Bypass type of vulnerability wherein we will see and practice all types of attacks in our course.In the end, we will also cover mitigations to secure a website and prevent these types of attacks.I have added Interview Questions and answers which be helpful for you when Auth Bypass questions are asked in any job or internship.3. In No Rate-Limit Attacks, we will check this vulnerability for different injection points, In addition, we will learn how to find these types of vulnerabilities in signup/creation of account or Login using password or verification of OTP or Tokens.We will see all the types of No Rate-Limit attacks on live websites which will give you a better understanding of the live environment when you will start your bug hunting journey.We will also cover different ways to perform No RL Exploitation using multiple types by automated spoofing our IP address on each request the same way this bug was found on Instagram and was awarded $15000 bounty.We will also cover how to throttle our requests by changing the requests and giving delay between each simultaneous request to bypass IDS and RateLimit checkers on the server-side.We will also see the exploitation of No RL on various injection points which generally other researchers miss out.This course also includes a breakdown of all the Hackerone reports submitted by other hackers for No RL type of vulnerability wherein we will see and practice all types of attacks in our course.In the end, we will also cover mitigations to secure a website and prevent these types of attacks.4. In CSRF Attacks, we will check this vulnerability for different injection points, In addition, we will learn how to find these types of vulnerabilities can lead to Account Takeover by changing the email and password.We will see all the types of CSRF attacks on live websites which will give you a better understanding of the live environment when you will start your bug hunting journey.We will also cover different ways to perform CSRF attacks and bypass CSRF protection on many live websites.This course also includes a breakdown of all the Hackerone reports submitted by other hackers for No RL type of vulnerability wherein we will see and practice all types of attacks in our course.In the end, we will also cover mitigations to secure a website and prevent these types of attacks.5. In CORS Attacks, we will check this vulnerability for different injection points, In addition, we will learn how to find these types of vulnerabilities can lead to Sensitive Data Disclosure of other users.We will see all the types of CORS attacks on live websites which will give you a better understanding of the live environment when you will start your bug hunting journey.We will also cover different ways to perform CORS attacks and bypass CORS protection on many live websites by using suffix and prefix types tricks.This course also includes a breakdown of all the Hackerone reports submitted by other hackers for CORS type of vulnerability wherein we will see and practice all types of attacks in our course.In the end, we will also cover mitigations to secure a website and prevent these types of attacks.You will also get additional BONUS sessions, in which I m going to share my personal approach for hunting bugs. All the videos are recorded on Live websites so that you understand the concepts as well as you get comfortable to work on a live environment. I have also added Interview Questions and answers for each attack which will be helpful for those are preparing for Job Interviews and Internships in the field of Information Security.With this course, you get 24/7 support, so if you have any questions you can post them in the Q&A section and we'll respond to you as soon as possible.Notes:This course is created for educational purposes only and all the websites I have performed attacks are ethically reported and fixed.Testing any website which doesn't have a Responsible Disclosure Policy is unethical and against the law, the author doesn't hold any responsibility.

Who this course is for:
Anybody interested in learning website & web application hacking / penetration testing.,Any Beginner who wants to start with Penetration Testing,Any Beginner who wants to start with Bug Bounty Hunting,Trainer who are willing to start teaching Pentesting,Any Professional who working in Cyber Security and Pentesting,Ethical Hackers who wants to learn How OWASP Works,Beginners in Cyber Security Industry for Analyst Position,SOC person who is working into a corporate environment,Developers who wants to fix vulnerabilities and build secure applications

For More Courses Visit & Bookmark Your Preferred Language Blog
From Here: - - - - - - - -

Bitte Anmelden oder Registrieren um Code Inhalt zu sehen!

Bitte Anmelden oder Registrieren um Code Inhalt zu sehen!

Bitte Anmelden oder Registrieren um Code Inhalt zu sehen!