Best seller

Learn Bug Bounty Hunting & Web Security Testing From Scratch

July 8, 2023 Network & Security, IT & Software, Udemy CoursesUdemy

Deal Score+2

122

REDEEM

Deal Score+2

REDEEM

Learn Bug Bounty Hunting & Web Security Testing From Scratch

Learn how to discover bugs / vulnerabilities like experts | OWASP top 10 + more | No prior knowledge required

Created by Zaid Sabih, z Security | 11 hours on-demand video course

Welcome to my comprehensive course on Bug Bounty Hunting & Web Security Testing course. This course assumes you have NO prior knowledge, it starts with you from scratch and takes you step-by-step to an advanced level, able to discover a large number of bugs or vulnerabilities (including the OWASP top 10) in any web application regardless of the technologies used in it or the cloud servers that it runs on.

This course is highly practical but doesn’t neglect the theory, we’ll start with basics to teach you how websites work, the technologies used and how these technologies work together to produce these nice and functional platforms that we use everyday. Then we’ll start hacking and bug hunting straight away. You’ll learn everything by example, by discovering security bugs and vulnerabilities, no boring dry lectures.

What you’ll learn

95+ videos to teach you bug hunting & security testing from scratch.
80+ hands-on real-life examples – from simple to advanced.
Discover the most common web application bugs and vulnerabilities.
Discover bugs from the OWASP top 10 most common security threats.
Bypass filters & security on all of the covered bugs & vulnerabilities.
2 Hour LIVE bug hunt / pentest on a real web application at the end of the course.
My approach to bug hunting and web application penetration testing.
The bug hunter / hacker mentality.
Efficiency use Burp Suite to discover bugs and vulnerabilities.
Discover sensitive & hidden information, paths, files, endpoints and subdomains
Gather information about websites & applications
Essential topics to bounty hunting.
HTTP methods & status codes.
Cookies & cookie manipulation
HTML basics for bug hunting.
XML basics for bug hunting.
Javascript basics for bug hunting.
Read & analyse headers, requests and responses
Discover information disclosure vulnerabilities.
Discover broken access control vulnerabiltiies.
Discover path / directory traversal vulnerabilities.
Discover CSRF vulnerabilities.
Discover IDOR vulnerabilities
Discover OAUTH 2.0 vulnerabilities
Discover Injection vulnerabilities.
Discover Command Injection vulnerabilities
Discover HTML Injection vulnerabilities
Discover XSS vulnerabilities (Reflected, Stored & DOM).
Advanced XSS discovery & bypass techniques
Discover SQL Injection vulnerabilities.
Discover Blind SQL Injection vulnerabilities.
Discover Time-based blind SQL Injection vulnerabilities.
Discover SSRF vulnerabilities.
Discover blind SSRF vulnerabilities.
Discover XXE vulnerabilities.
The Burp Suite Proxy.
The Burp Suite Repeater.
The Burp Suite Filter
The Burp Suite Intruder.
The Burp Suite Collaborator.