–Udemy Training–
Last updated 4/2023
Duration: 4h 29m | .MP4 | 720p | Language: English
Develop ”Out-of-box” thinking related to web secure codin and see security from offensive perspective
What you’ll learn
Best practices when it comes to secure coding for web developers
OWASP Top 10 Web vulnerabilities
“Out-of-box thinking” when it comes to exploiting certain vulnerabilities
Learn certain tools and frameworks for offensive perspective
Requirements
basic knowledge of HTTP Protocol, Linux and web development.
Description
You will learn to protect your web application by attacking it, by performing penetration testing on it. This course is rather theoretical with only some labs and demos.
Objectives
Develop ”Out-of-box” thinking
See security from an offensive perspective
Learn best security practices and (most and less) common attacks
Learn to defend your applications and infrastructure
Topics
Overview of Web Penetration Testing
OWASP Top Ten Web Vulnerabilities
API Top Ten vulnerabilities
HTTP Security Headers
JSON Web Tokens
Technical measures and best practices
Cryptography
Overview of Web Penetration Testing
Core problems
Web Technologies basics
Security Audit vs Vulnerability Assessment vs Pentest
Information Gathering
Scanning and Enumeration
Mapping the target surface
Attacking Users. Cross Site Scripting
Attacking the Server
Attacking Authentication
Attacking Data Stores
Top 10 API Security Vulnerabilities
API Vulnerabilities
Examples of vulnerabilities found in publicly accessible applications
OWASP Top Ten Web Vulnerabilities
A1: Injection
A2 – Broken Authentication and Session Management
A3 – Cross-Site Scripting (XSS)
A4 – Insecure Direct Object References
A5 – Security Misconfiguration
A6 – Sensitive data Exposure
A7 – Missing Function Level Access Control
A8 – Cross-Site Request Forgery (CSRF)
A9 – Using Components with Known Vulnerabilities
A10 – Unvalidated Redirects and Forwards
New Addition in OWASP TOP 10 – 2017
A4 – XML External entities (XXE)
A5 – Broken Access Control
A8 – Insecure Deserialization
A10 – Insufficient Logging & Monitoring
New additions in 2021
Common Vulnerabilities: XSS, SQL Injection, CSRF, XXE, LFI
HTTP Security Headers
Understand HTTP Security Tokens and their role
HSTS – Strict-Transport-Security
CSP – Content-Security-Policy
CORS
X-Frame-Options
X-XSS-Protection
X-Content-Type-Options
Referrer-Policy
Cookie flags: HTTPOnly, Secure
JSON Web Tokens
Understanding JSON WEB TOKENS
Token Structure
When can you use JWT
Issues
What is JWT good for?
Best Practices for JSON Web Tokens
Technical measures and best practices
Input Validation
Encoding
Bind Parameters for Database Queries
Protect Data in Transit
Hash and Salt Your Users’ Passwords
Encrypt Data at Rest
Logging – Best practices
Authenticate Users Safely
Protect User Sessions
Authorize Actions
Cryptography
Cryptographic concepts
Algorithms
Cryptography and cryptanalysis tools
Cryptography attacks
Who this course is for:
Developers, Dev(Sec)Ops and software architects mostly
Also useful for system administrators, technical managers and CISO
Ethical Hackers, Penetration Testers, Bug Bounty Fans
More info: https://www.udemy.com/course/owasp-security-for-developers-an-offensive-approach
DOWNLOAD
https://rapidgator.net/file/9e52fb64275f72430e40b5598f92601e
https://rapidgator.net/file/ced5c562f8caafa317979da2640d51d1
https://nitroflare.com/view/3F313F3D57397FE
https://nitroflare.com/view/0FBB17BE3751023
https://katfile.com/46nbr3yh390c
https://katfile.com/ewfn83ngv6fp
https://ddownload.com/vw4wdrl4mpo0
https://ddownload.com/ugyrh5smzn4g