Web Application Ethical Hacking - Penetration Testing Course for Beginners

Learn web app penetration testing. You will learn pentesting techniques, tools, common attacks and more. The tools covered in the course include Burp Suite, Nikto, Dirbuster, curl, sublist3r, nmap, and many others.

This course was originally live streamed weekly on Twitch and built from lessons learned in the previous week.

⭐️ Course Contents ⭐️
⌨️ (0:00) Introduction
⌨️ (0:52) Episode 1 - Enumeration
⌨️ (1:20:28) Episode 2 - Enumeration, XSS, and UI Bypassing
⌨️ (2:19:40) Episode 3 - XSS, SQL Injection, and Broken Access Control
⌨️ (3:13:30) Episode 4 - XXE, Input Validation, Broken Access Control, and More XSS
⌨️ (4:13:40) Episode 5 - SQL Injections and Live Bug Bounty Hunting

--

[kaza]

This is great. I want to be Full Stack Developer and this will help me to understand weaknesses of web aplications

[tanmay]

For those on android -
⭐️ Course Contents ⭐️
⌨️ (0:00) Introduction
⌨️ (0:52) Episode 1 - Enumeration
⌨️ (1:20:28) Episode 2 - Enumeration, XSS, and UI Bypassing
⌨️ (2:19:40) Episode 3 - XSS, SQL Injection, and Broken Access Control
⌨️ (3:13:30) Episode 4 - XXE, Input Validation, Broken Access Control, and More XSS

⌨️ (4:13:40) Episode 5 - SQL Injections and Live Bug Bounty Hunting

[kristiannn]

PART 1
14:55 - start
17:50 - gaining access
18:28 - maintain access
18:47 - covering tracks
23:08 - task
33:33 - burp suite
35:28 - burp start
39:07 -
42:52 - what can we do
44:59 -

PART 2
1:28:49 - click around
1:32:01 - starting challenges
1:32:12 - viewing source code
1:33:32 - inspector tools
1:34:30 - challenge 1
1:37:07 - redirect challenge
1:40:05 - drive principal
1:43:29 - improper input validation
1:47:40 - html example
1:50:04 -
1:51:32 -
1:57:16 - xss
1:58:00 - there are 3 xss (reflected, stored, DOM)
1:59:49 -
2:07:17 - customer feedback function
2:12:05 -

PART 3
2:24:23 - start
2:27:07 -
2:30:45 - xss payloads
2:35:10 - sql injection
2:45:18 - sql injection
2:51:51 - admin login sql inject

PART 4
4:18:55 - start
4:21:13 - sqli recap
4:24:21 - juiceshop challenge
4:25:22 - burp
4:43:48 - sqlmap
4:59:16 - end

[pathseeker]

Just the course I've been waiting for all my life

[vsulli]

3:41:50 - You can tell that Health is laughing to himself after reading the 'Heath is super cool.' comment. I like how much he enjoys teaching this course, especially after hearing all the prep work, 8-12 hrs, that goes into these weekly webinars.

[dox]

Wow you guys are quick. He uploaded that just a few days ago!

[Omerko]

Channel keeps surprising me with uploads, Thanks!

[nikhilb]

Dude. I was just searching for this and you uploaded it. What coincidence is this?

[crysiscontained]

Older video I know but the crawl feature is only for burp pro and is greyed out for community. I have been using ffuf with the burb proxy to get a similar result for at least getting the site mapped.

[logiclegend]

This channel is best thing ever happened to programming lol.

[ricardoclaus]

Very useful training. They could activate the subtitle for easy translation.

[ksubscriberswithoutanyvi-cyvt]

ur videos help to become successful bug bounty hunters

[sc]

I was perplexed by the web app protection mechanism. And this course uploaded few minutes ago shows up.
So this course is for me. And here I am.

[andrewchen]

Great to see you here! Thank you for the tutorial😉

[aryanadiazcakasana]

pure gold !, with this course when quarantine end i will become a pentester 😂

[JUNAEDKHAN-luxo]

Hi! I am watching you from Bangladesh. Your's courses are really helpful. I have a request, please open cc in your you tube videos.

[Tekionemission]

Kudos for taking the time to put this out.

[mayattv]

Let's go for 2 million subscribers! 🔥🔥🔥

[BEATRIZMAG]

Merci ! Amazing content I have been waiting and now I have it 🙌.

[vaclemor]

Dude I love Burp I used it in my Pen Testing class in college