Web Hacking: Become a Pentester - Lecture 1: Intro

A quick introduction of the Web Hacking course.

This is a preview lecture from my online web hacking training called Web Hacking: Become a Pentester.

Trainings:

Transcript:
Hi everybody, my name is Geri Revay from the Aether security lab, and I will be the instructor of this course. I am full time penetration tester and I also put my experience in courses like this.

This particular course is about how to do security assessment of web applications and services. I will show you all necessary techniques, technologies and tools that you will need to do a web assessment. Although we are talking about hacking techniques here, but I will show everything from the perspective of an ethical hacker who is payed by the application owner to find vulnerabilities in his application. So we will go all white hat.

In this course we will follow a similar methodology that I use in my own work when I test web application. We will go through each security aspect of web applications I will explain the typical vulnerabilities and how to find them. The course is fully hands on, so I expect you to try everything yourself in your own test environment, which we will setup together in the next section. I strongly encourage you to really try everything on your own because only by watching the videos you won't learn too much. Hacking is a really practical thing and the only way to learn it is through practice, so do it.

There are a few thing you should not expect from this course. As I said we absolutely follow the ethical way so I won't help you in doing anything illegal. We talk about general web security and hacking through example applications, so we won't "hack facebook", but the techniques learnt here apply to all web applications. This is also not a complete course. Many instructors offer courses like "complete guide to ethical hacking" or something like that. I understand the marketing value of this but it is a lie. There is no such thing in IT and especially in security as completeness. There are new programming languages, algorithms, frameworks released every day. There is no way somebody will teach you all of them.

Instead of that I rather tried to make a course which covers everything that you need to do a web security assessment. But it is far from complete. Hacking and security is all about learning new things and googleing a lot. So if you don't understand something, then google it, try to figure it out. Of course I am always there to help, but finding out things yourself is essential to this profession.

Alright, that is about it. See you in the next lecture.