Hacking Web Applications (2+ hours of content)

0:00 - Introduction
1:15 - NordPass Sponsorship
2:10 - Course Overview
3:46 - The OWASP Top 10
14:11 - Installing OWASP Juice Shop
21:00 - Installing Foxy Proxy
23:14 - Exploring Burp Suite
34:42 - Introducing the Score Board
37:33 - SQL Injection Overview
42:45 - SQL Injection Walkthrough
52:52 - SQL Injection Defenses
55:41 - Broken Authentication Attacks and Defenses
1:01:25 - Testing for Broken Authentication
1:09:05 - Sensitive Data Exposure Attacks and Defenses
1:13:58 - Testing for Sensitive Data Exposure
1:22:00 - XML External Entities (XXE) Overview
1:31:54 - XXE Attacks and Defenses
1:39:58 - Broken Access Control Overview
1:43:27 - Broken Access Control Walkthrough
1:47:55 - Security Misconfigurations Overview
1:52:54 - Cross-Site Scripting (XSS) Overview
2:03:27 - Reflected XSS Walkthrough
2:09:50 - Stored XSS Walkthrough
2:16:07 - Preventing XSS
2:19:55 - Insecure Deserialization
2:24:28 - Using Components with Known Vulnerabilities
2:29:06 - Insufficient Logging and Monitoring
2:32:17 - Conclusion

📱Social Media📱
___________________________________________

💸Donate💸
___________________________________________
Like the channel? Please consider supporting me on Patreon:

Hacker Books:

My Build:

My Recording Equipment:

[FarmanPRO]

Love this guy so far he has the best simple Cybersecurity courses ! which is not making you confuse.

[ianp]

this is awesome thank you! The PEH course rules because after you buy it (at a really affordable price) it continues to improve and update.

[ablsec]

Thanks for sharing this! You guys are Great!!!

[arobarathchandru.b]

can you provoide the link for owsap that excel sheet and pdf you mentioned in the video

[Bundeyusuf]

watched this keenly for 2hrs, it was a very good content...

[roiahassan]

if i bought the full course it will be enough for me ? i don, t need to buy anouther course for ethical hacking and i could start work?

[om]

Can you provide an copy of your web checklist file? It will alot be helpful for me to learn as per checking stuff. Thanks

[julesruzindana-rukundo]

sir can is it mandatory to have kali linux or would an opensuse(any limitations with this distro compared to kali ) allow me to follow along?thanks in advance

[tjoleary]

Can someone link to the references Heath mentions in the video. Maybe it's me but I am not seeing them.

[deurpzc]

When im on burp suite there is no Target, have I missed something

[dennisreynolds]

Got a question: udemy would it be a great place to learn bug bounty hunter/ hacking for bug?

[generalshouva]

Which desktop environment are you using ?

[TheBashir]

Hey do u have any docker images for practice

[nazzier]

Excuse me all masters, I want to ask if there are scanning / nmap results for a certain IP where the "version" does not appear but the "service" is listed as "tcpwrapped", if I "searchsploit tcpwrapped" there are no results, is there a way/ other methods to exploit service "tcpwrapped"?, Please help, Thank you very much in advance😬🙏

[richardglabella]

Very helpful! Thank you for doing this!

[sinhasco]

IS this useful for learning bugbounty?

[OwenRooted]

Always giving back to the community Heath❤, thanks again TCM

[arunchakraborty]

Till python tutorial in part 1 everthing was going so smooth . But after that i couldnot hang on to everything .

[quezinmark]

I want to start from scratch for hunting bugs I have zero idea Can anyone guide me with best free resource

[digitalforensicsalam]

Sir manual exploit website login page without any tool sir please one video