1 6 min

SANS SEC642: Advanced Web App Penetration Testing, Ethical Hacking, and Exploitation Techniques (PDF-VID-LAB)

$20.00

SEC642 will teach you the advanced skills and techniques required to test modern web applications and next-generation technologies. In this course, you will learn through a combination of lectures, real-world experiences, and hands-on exercises that will teach you the techniques to test the security of tried-and-true internal enterprise web technologies, as well as cutting-edge Internet-facing applications. On the final day of the course, you will apply the knowledge you have acquired in a Capture-the-Flag competition, a fun environment based on real-world technologies.

Modern web applications are growing more sophisticated and complex as they use exciting new technologies and support ever-more critical operations. Long gone are the days of basic HTML requests and responses. The complexity of HTTP and modern web applications is progressing at breathtaking speed. With the demands of highly available web clusters and cloud deployments, web applications are looking to deliver more functionality in smaller packets at a decreased strain on backend infrastructure. Welcome to an era that includes tricked-out cryptography, WebSockets, HTTP/2, and a whole lot more. Are your web application assessment and penetration testing skills ready to evaluate these impressive new technologies and make them more secure?

 

HOMEPAGE – https://www.sans.org/cyber-security-courses/advanced-web-app-penetration-testing-ethical-hacking

 

Original Price: $7,020
Our Price: $20

Description

Size: 5.46 GB

You Will Learn

  • How to discover and exploit vulnerabilities in modern web frameworks, technologies, and backends
  • Skills to test and exploit specific technologies such as HTTP/2, Web Sockets, and Node.js
  • How to evaluate and find vulnerabilities in the many uses of encryption within modern web applications
  • Skills to test and evaluate mobile backends and web services used in an enterprise
  • Methods to recognize and bypass custom developer, web framework, and Web Application Firewall defenses

You Will Be Able To

  • Perform advanced Local File Include (LFI)/Remote File Include (RFI), Blind SQL injection (SQLi), and Cross-Site Scripting (XSS) combined with Cross-Site Request Forger (XSRF) discovery and exploitation
  • Exploit advanced vulnerabilities common to most backend language like Mass Assignments, Type Juggling, and Object Serialization
  • Perform JavaScript-based injection against ExpressJS, Node.js, and NoSQL
  • Understand the special testing methods for content management systems such as SharePoint and WordPress
  • Identify and exploit encryption implementations within web applications and frameworks
  • Discover XML Entity and XPath vulnerabilities in SOAP or REST web services and other datastores
  • Use tools and techniques to work with and exploit HTTP/2 and Web Sockets
  • Identify and bypass Web Application Firewalls and application filtering techniques to exploit the system

Related products

  • Security , Shop

    eLearnSecurity – Threat Hunting Professional v2

    Course at a glance

    • Establish a proactive defense mentality
    • Hunt for threats in your organization’s systems and network
    • Use threat intelligence or hypotheses to hunt for known and unknown threats
    • Inspect network traffic and identify abnormal activity in it
    • Perform memory forensics using Redline, Volatility and a variety of tools to identify in-memory malware
    • Use tools such as Sysmon and …

    $7.00

  • Security , Shop

    eLearnSecurity – Practical Web Defense

    Course at a glance

    • Close the gap between Web application attack and defense
    • Mitigation advices for multiple platforms and languages
    • The most comprehensive and practical coverage of the OWASP Testing Guide
    • Comprehensively aligned to OWASP methodologies, tools and tests
    • Covers and goes beyond OWASP TOP 10
    • Detailed techniques and methodology to simplify defense of web applications
    • No boring theory: practice oriented curriculum

      • …

    $7.00

  • Security , Shop

    eLearnSecurity – Web Application Penetration Testing v3

    Course at a glance

    • Start from the very basics, all the way to advanced post-exploitation activities
    • Wide coverage of OWASP’s TOP 10
    • Master Burp Suite
    • In-depth Web application analysis, information gathering and enumeration
    • XSS & SQL Injection
    • Session related vulnerabilities
    • LFI/RFI
    • HTML5 attacks
    • Pentesting Content Management Systems (CMS)
    • Pentesting NoSQL databases and NoSQL-related APIs / NoSQL injections
    • Start from Web …

    $7.00

  • Security , Shop

    Penetration Testing Student v2 (eJPT)

    The hardest thing you will ever do in cybersecurity is to land your first job. There are HR gateways, industry jargon, and companies unwilling to hire new talent. To help combat these challenges, we have built a hands-on training path focused on the necessary skills to start your career.

    This certification covers Assessment Methodologies and Enterprise Auditing with Host, Network, and …

    $10.00