Web Penetration Testing & Bug Bounty Fundamentals

This lesson introduces the course and its objectives in web penetration testing and bug bounty.

This lesson explains what SQL is and its role in database management.

This lesson discusses the risks and potential impacts of SQL injection vulnerabilities.

This lesson covers techniques for discovering SQL injection vulnerabilities in POST requests.

This lesson covers techniques for bypassing login authentication using SQL injection vulnerabilities.

This lesson explores methods to bypass more secure login systems through SQL injection.

This lesson discusses strategies for preventing SQL injection attacks in login pages.

This lesson focuses on identifying SQL injection vulnerabilities in GET requests.

This lesson teaches how to read and extract information from a database.

This lesson covers techniques for finding database tables using SQL injection.

This lesson explains how to extract sensitive data, such as passwords, from databases.

This lesson introduces the exploitation of blind SQL injection vulnerabilities.

This lesson demonstrates how to obtain a direct SQL shell using SQLmap.

This lesson outlines effective methods to prevent SQL injection vulnerabilities.

This lesson covers the discovery of complex SQL injection vulnerabilities.

This lesson focuses on exploiting advanced SQL injection vulnerabilities to extract passwords.

This lesson discusses techniques for bypassing filters in SQL injection attacks.

This lesson covers methods for bypassing security to access all records.

This lesson provides quick fixes to prevent SQL injection vulnerabilities.

This lesson teaches how to read and write files on the server using SQL injections.

This lesson demonstrates how to gain control of the target server using SQL injection.

This lesson covers extracting data using SQLmap to discover SQL injections.

This lesson provides an introduction to XSS, or Cross Site Scripting.

This lesson focuses on discovering basic reflected XSS vulnerabilities.

This lesson covers techniques for discovering advanced reflected XSS vulnerabilities.

This lesson explores methods for discovering even more advanced reflected XSS vulnerabilities.

This lesson teaches how to discover stored XSS vulnerabilities.

This lesson covers techniques for discovering advanced stored XSS vulnerabilities.

This lesson demonstrates how to hook victims to BeEF using reflected XSS.

This lesson demonstrates a basic delivery method for testing backdoor vulnerabilities on Windows 10.

Learn how to gain full control over a Windows target through exploitation techniques.

This lesson covers methods for fixing XSS vulnerabilities in web applications.

Explore how to hook victims to BeEF using stored XSS attacks.

Interacting with targets that have been hooked through the BeEF framework is covered in this lesson.

Learn how to run basic commands on victims after exploiting XSS vulnerabilities.

This lesson demonstrates how to steal credentials using a fake login prompt.

An overview of installing the Veil framework is provided in this bonus lesson.

This bonus lesson covers the basics of Veil payloads.

Learn how to generate an undetectable backdoor using Veil 3 in this bonus lesson.

This lesson explains how to listen for incoming connections after setting up a backdoor.

Learn how to log in as an admin without a password by manipulating cookies.

This lesson focuses on discovering Cross Site Request Forgery (CSRF) vulnerabilities.

Exploiting CSRF vulnerabilities to change an admin password using an HTML file is covered.

Learn how to exploit CSRF vulnerabilities to change an admin password using a link.

This lesson discusses the proper methods to prevent CSRF vulnerabilities.