Complete Website Ethical Hacking and Penetration Testing (Udemy.com)

Hello everyone..!!

welcome to the CWAPT i.e. the Complete Web application Penetration Testing Practical Course . My name is DEBAYAN DEY and i will be your Instructor for the CWAPT Course.

Now this course is designed for anyone who is interested in learning how an attacker attack and get the information from website by exploiting various vulnerabilities available.

CWAPT is designed by keeping in mind that most of us are having laptops or computer machine to work for most of the time and in a survey , we came up with the answer that most of the Computer users are very much interested in Learning how Web Application Penetration Testing works and what are the process in which we use penetration testing and security skills to find different vulnerabilities in web applications. As we all know , website and webservers plays an important role in every modern organization, Thats why in this course curriculum , Only you need a computer device and this entire course is 100% practical based ! isn't this amazing ??? and everything will be explained in depth , followed with reading materials and quizes which will give you a boost in the field of Ethical Hacking!!! so all in one , you just require a computer device and turn it into powerful ethical hacking machine.

Little brief about my name ,   i am Certified Secure Computer User (CSCU) v2 , and Certified Ethical Hacker (CEH V10) from EC COUNCIL

also i am certified Google IT support from Google , and currently doing  micromaster  in the Field of Cyber Security from Rochester institute of technology (RIT) New York in edx .

here are few of my other accomplishments in the field of cyber security ,

• Introduction to Cyber Attacks , New York University

• introduction to Cyber security for business , University of Colorado System

• Palo Alto Networks academy cybersecurity foundation  , Palo alto networks

• International cyber conflicts  , The State University of New York

• Cyber Attacks Countermeasures , New York University

• Networking ans security Architecture with Vmware NSX

• Enterprise System Management and security ,University of Colorado System

Rest we'll have a meet and greet section to know other Learners ...!!!

so whats there in this CWAP COURSE?

First of all i would love to tell you , that this course is not limited to time . you may see 4 or 5 sections today , once you land in this course after few weeks , you'll see more sections and videos are added up. so this is the advantage of taking this course that you'll get regular updates about the new features and attacks and how you , as an individual person as well as organization or company can prevent from such an attack.

The web application penetration testing key outcome is to identify security weakness across the entire web application and its components (source code, database, back-end network).It also helps in prioritizing the identified vulnerabilities and threats, and possible ways to mitigate them.

so keeping these outcomes in mind , in 1st section of CWAPT course ,

you'll come across the setting up the lab environment wherein you'll download N install virtual box , then Kali linux 2020 and the entire configuration.

• Meet and Greet !!!

• Downloading and installation of virtual box

• Understanding of what is Virtual Machine

• Download  of Kali Linux Virtual Box image

• Installation of Kali linux 2020

• Booting up kali in virtual box for the 1st time

• Default login and update and upgrade

• Full Screen and understanding FSH i.e. File System Hierarchy

• and much more with Reading Materials and Quizzes ..!!

in 2nd section ,

we will come across various commands used in Kali Linux and we'll get familiar with our Hacking machine. this section is very important as you'll be understanding the basic commands which we will be using in our course , so make sure you understand this section very clearly.

• Basic linux command who am i

• Basic Commands su and pwd

• Basic command ls touch nano

• Basic command cat cp mkdir

• Basic Command mv and rm

• System and User Commands

• Network commands

• Add New User with full sudo Permission

• How to delete user using command line

• and much more with Reading Materials and Quizzes ..!!

next section , i.e. our 3rd Section will cover DVWA.

What is  DVWA?

DVWA is a DAMM VULNERABLE WEB APP coded in PHP/MYSQL. Seriously it is too vulnerable. In this app security professionals, ethical hackers test their skills and run this tools in a legal environment. It also helps web developer better understand the processes of securing web applications and teacher/students to teach/learn web application security in a safe environment.

• What is DVWA

• XAMPP Theory and Installation

• DVWA download Install and configuration with XAMPP

• Command Injection Low , Medium and High Security

• File Inclusion Low , Medium and High Security

• File Upload  Low , Medium and High Security

• XSS DOM Low , Medium and High Security

• XSS Reflected Low , Medium and High Security

• XSS Stored Low , Medium and High Security

• and much more with Reading Materials and Quizzes ..!!

The aim of DVWA is to practice some of the most common web vulnerability, with various difficulties levels.

We gonna learn what is DVWA used for , we'll use XAMP and understand its working.