Website Hacking

Introduction:    

A website is nothing but just an application that is installed on a device or computer. A website has two main applications that are a web server (for example, Apache), and a database (for example, MySQL). The web server is used to understand and executes the web application. A web application can be written in Java, Python, PHP, or any other programming language. The only restriction is that the web server needs to be able to understand and execute the web application. The database contains the data that is used by the web application. All of this is stored on a computer called the server. The server is connected to the internet and has an IP address, and anybody can access or ping it. we know that a website is installed on a computer, we can try to attack and hack it just like any other computer. However, we know that a website is installed on a computer, we can try to attack and hack it just like any other computer. We can also use server-side attacks to see which operating system, web server or other applications are installed. If we find any vulnerabilities, we can use any of them to gain access to the computer. Another way to attack is client-side attacks. Because websites are managed and maintained by humans. This means that, if we manage to hack any of the administrators of the site, we will probably be able to get their username and password, and from there log in to their admin panel or to the Secure Socket Shell (SSH). Then we will be able to access any of the servers that they use to manage the website.

Objectives: 

1. ·         The learner will be able to understand network attacks and their types, i.e., active and passive attacks.
2. ·         The learner will be able to understand endpoint attacks, malware attacks, vulnerabilities, and exploits.
3. ·         This web hacking training course provides a beginner-level step into the world of ethical hacking and penetration testing
4. ·         explain the basic principles and techniques of how attackers can enter computer systems. 
5. ·         It enables the cybersecurity workforce to learn, hack, test, and secure web 

Course Outlines:

1. ·         Introduction
2. ·         Attacking a Website
3. ·         Information Gathering
4. ·         Who is Lookup
5. ·         Net craft
6. ·         Robtex
7. ·         Discovering Subdomain
8. ·         Analyzing Discovering Files
9. ·         File Upload Vulnerabilities
10. ·         Exploiting File Upload Vulnerabilities without Remote Code Execution
11. ·         Exploiting a Code Execution Vulnerability
12. ·         Discovering & Exploiting Local File Inclusion Vulnerabilities
13. ·         Remote File Inclusion (RFI)
14. ·         SQL
15. ·         Risks Associated with SQL Injection
16. ·         Discovering SQL Injections in POST
17. ·         SQL Injection Login Bypass
18. ·         The SQL SELECT Statement
19. ·         Types of Database Attacks Hackers Use to Obtain Unauthorized Access
20. ·         Reading and Writing Files in SQL Server using T-SQL
21. ·         Discovering SQL Injections & Extracting Data Using SQL Map
22. ·         How to Defend Against SQL Injection Attacks
23. ·         Introduction to Cross Site Scripting
24. ·         Reflected Cross Site Scripting (XSS) Attacks
25. ·         Stored Cross Site Scripting
26. ·         How to Setup OWASP ZAP to Scan your Web Application for Security Vulnerabilities

Who should attend?

1. ·         Anybody with basic knowledge of computer science and interested in understanding Cyber Security and learning hacking techniques
2. ·         Cyber Hackers
3. ·         Security Officers/Auditors
4. ·         Security Professionals
5. ·         Site Administrators
6. ·         anyone who is concerned about the integrity of their network infrastructure

Learning Outcomes:

1. ·         The learner will be able to understand network attacks and their types, i.e., active and passive attacks.
2. ·         The learner will be able to understand endpoint attacks, malware attacks, vulnerabilities, and exploits.
3. ·         This web hacking training course provides a beginner-level step into the world of ethical hacking and penetration testing
4. ·         explain the basic principles and techniques of how attackers can enter computer systems. 
5. ·         It enables the cybersecurity workforce to learn, hack, test, and secure web 

End of Course

After completion of the course students must undertake the exam. Once the exam is passed, it is considered as end of the course.