کاریارارقام

SANS 560:

• Comprehensive Pen Test Planning, Scoping, and Recon

• In-Depth Scanning

• Exploitation & Post-Exploitation and Merciless Pivoting

• Password Attacks and Web App Pen Testing

• Bypassing Antivirus

• Malware ( Worm, Virus, Trojan )

SANS 542:

Web Penetration Testing and Ethical Hacking: Introduction and Information Gathering

• Overview of the web from a penetration tester's perspective

• Exploring the various servers and clients

• Discussion of the various web architectures

• Discovering how session state works

• Discussion of the different types of vulnerabilities

• Defining a web application test scope and process

• Defining types of penetration testing

• Heartbleed exploitation

• Utilizing the Burp Suite in web app penetration testing

Web Penetration Testing and Ethical Hacking: Configuration, Identity, and Authentication Testing

• Discovering the infrastructure within the application

• Identifying the machines and operating systems

• Secure Sockets Layer (SSL) configurations and weaknesses

• Exploring virtual hosting and its impact on testing

• Learning methods to identify load balancers

• Software configuration discovery

• Exploring external information sources

• Learning tools to spider a website

• Scripting to automate web requests and spidering

• Brute forcing unlinked files and directories

• Discovering and exploiting Shellshock

Web Penetration Testing and Ethical Hacking: Injection

• Python for web app penetration testing

• Web app vulnerabilities and manual verification techniques

• Information leakage and directory browsing

• Username harvesting

• Interception proxies

• Zed Attack Proxy (ZAP)

• Burp Suite

• Command Injection

• Directory traversal

• Local File Inclusion (LFI)

• Remote File Inclusion (RFI)

• SQL injection

• Blind SQL injection

• JavaScript for the attacker

Web Penetration Testing and Ethical Hacking: JavaScript and XSS

• Cross-Site Scripting (XSS)

• Cross-Site Request Forgery (CSRF)

• Session flaws

• Session fixation

• AJAX

• XML and JSON

• Logic attacks

• Data binding attacks

• Automated web application scanners

• w3af

Web Penetration Testing and Ethical Hacking: CSRF, Logic Flaws and Advanced Tools

• The sqlmap tool

• Metasploit for web penetration testers

• Exploring methods to zombify browsers

• Browser Exploitation Framework (BeEF)

• Leveraging attacks to gain access to the system

• How to pivot our attacks through a web application

• Understanding methods of interacting with a server through SQL injection

• Exploiting applications to steal cookies

• Executing commands through web application vulnerabilities

• Walking through an entire attack scenario