webpen.tar.gz

shodan_api

Wireshark

chrome

Burp

frog

proxychains

encoder

setoolkitChrome

chromeShark

juiceshop

BurpChrome

This course is intended for people interested in information security—particularly in the penetration testing of various websites—to identify the security flaws present in the majority of newly developed websites and how to fix them. 

You will learn web penetration testing techniques using the Kali Linux operating system. You will be introduced to Python programming, web server technology, network management, open source intelligence, cross-site scripting, SQL injection, authentication and authorization in systems, cross-site request forgery, social engineering attacks, and concepts in information security management. 

Your knowledge of the various web application vulnerabilities and attack methods will be enhanced after taking this course. You will get hands-on experience with many tools used in online penetration testing in cyber security.

Web Application Penetration Testing

**(Select all that apply.)** Which options can be used by a pentester in gathering information about a given website? 

(Select all that apply.) Which options can be used by a pentester in gathering information about a given website?

Collection → analysis → processing → production

Collection → processing → analysis → production

Processing → production → analysis → collection

Collection → analysis → exploitation → presentation

Which statement best describes the OSINT lifecycle that a web pentester would follow to achieve better results?

Which statement best describes the OSINT lifecycle that a web pentester would follow to achieve better results?

A web pentester would like to fingerprint a website called example.com using `whatweb` and present the information in a more organized manner. Which command can be used to perform this task? 

A web pentester would like to fingerprint a website called <a href="http://example.com">example.com</a> using <code>whatweb</code> and present the information in a more organized manner. Which command can be used to perform this task?

Using the Google dorking `intitle` filter, what would be used to check for password backup files? 

Using the Google dorking <code>intitle</code> filter, what would be used to check for password backup files?

Let's say you want to check what sort of information pops up for your American client's web application when you run a sweep query using Shodan's web interface. Their web application is hosted in Paris and uses Apache. Which query would be best?

Let’s say you want to check what sort of information pops up for your American client’s web application when you run a sweep query using Shodan’s web interface. Their web application is hosted in Paris and uses Apache. Which query would be best?

Take a short quiz on what you learned in this chapter.

Introduction to the Course

Introduction to Linux

Introduction to Python

Web and Server Technology

Network Management and Analysis

Open-Source Intelligence

Cross-Site Scripting

SQL Injection

Authentication and Authorization

Cross-Site Request Forgery

Social Engineering Attacks

Broader Security Concepts

Wrapping Up

Quiz Yourself on Open-Source Intelligence