下载 Udemy - Cross-Site Scripting (XSS) The 2021 Guide torrent - GloDLS
洪流细节 "Udemy - Cross-Site Scripting (XSS) The 2021 Guide"

Udemy - Cross-Site Scripting (XSS) The 2021 Guide

To download this torrent, you need a BitTorrent client: Vuze or BTGuard
下载这洪流
Download using Magnet Link

健康:
种子: 1
懒鬼: 2
已完成: 51 
上次检查: 03-06-2021 10:22:34

上传者的声誉点 : 7860




Thanks By

Write a Review for the Uploader:   15   Say Thanks with one good review:
Share on Facebook


Details
name:Udemy - Cross-Site Scripting (XSS) The 2021 Guide
说明:

Description

About the course:

Welcome to this course on Cross-Site Scripting (XSS)! In this course, we explore one of the biggest risks facing web applications today.

I’ve spent months creating and collecting the best resources on XSS to put them in this course so that you can learn XSS in a fun, efficient, and practical manner.

We start out by explaining the concepts of XSS and its 3 main types: Reflected, Stored, and DOM-based. Then, we break down recent real-world case studies of XSS vulnerabilities from Facebook, Gmail, Twitter, Tesla, Airbnb, and TikTok. After that, we create safe and legal lab environments to perform all 3 types of attacks with both manual and automated approaches. We then set up, configure, and use a powerful browser exploitation framework called BeEF to deliver payloads that hook unsuspecting browsers and let you send commands to those browsers remotely.

From there, you can launch a number of different attacks from BeEF with command modules (ie: scan internal networks, deface websites, compromise routers, etc…).

This is an important step because it demonstrates just how powerful a single, simple XSS payload can be, and why it’s critical that you defend your apps from this serious threat.

After that, we apply everything we’ve learned and pentest the OWASP Juice Shop starting with information gathering before exploiting all 3 types of XSS to complete challenges of varying difficulty.

Finally, we wrap up the course by discussing the most (and least) effective defensive controls including rules, cheat sheets, and recommended code review techniques to properly defend your applications from this dangerous threat.

If you’re looking for a hands-on way of learning Cross-Site Scripting, this is your course!

Please note: Performing these attacks on environments you do not have explicit permissions for is illegal and will get you in trouble. That is not the purpose of this course. The purpose is to teach you how to secure your own applications by providing a safe learning environment.

———————–

Topics we will cover together:

   What Cross-Site Scripting (XSS) is and how it works
   The 3 main types of XSS: Reflected, Persistent, and DOM-based
   Recent real-world case studies of XSS vulnerabilities in Facebook, Gmail, Twitter, Tesla, Airbnb, and TikTok
   How to set up a lab environment with Kali Linux Virtual Machine for free
   How to easily configure and create safe & legal lab environments using containers inside of Kali
   How to get started with OWASP ZAP (a free alternative to Burp Suite)
   XSS techniques with cheatsheets and references
   How to use manually-crafted payloads to evade security filters
   How to use automated tools to find successful XSS payloads (including ZAP, XSStrike, XSSer)
   How to remotely control browsers with BeEF
   How to gather information about your target in order to find potential vulnerabilities
   How to perform XSS injections by hand with crafted requests using a proxy tool (ZAP)
   How to use results from successful injections to exploit targets (ie: change a user’s password with a single URL via CSRF)
   Effective (and ineffective) defenses against XSS
   Side-by-side comparison of vulnerable and secure code
   Cheatsheets to protect your applications
   Rules to follow in order to prevent XSS vulnerabilities for all 3 types of attacks
   How to review code for XSS vulnerabilities
   Recommended testing guides

———————–

Instructor

My name is Christophe Limpalair, and I have helped thousands of individuals pass IT certifications, learn how to use the cloud, and develop secure applications. I got started in IT at the age of 11 and unintentionally fell into the world of cybersecurity. Fast-forward to today, and I’ve co-founded a fast-growing cybersecurity community, Cybr, that also provides training resources.

As I developed a strong interest in programming and cloud computing, my focus for the past few years has been training thousands of individuals in small, medium, and large businesses (including Fortune 500) on how to use cloud providers (such as Amazon Web Services) efficiently, and how to develop more secure applications.

I’ve taught certification courses such as the AWS Certified Developer, AWS Certified SysOps Administrator, and AWS Certified DevOps Professional, as well as non-certification courses such as Introduction to Application Security (AppSec), SQL Injection Attacks, Introduction to OS Command Injections, Lambda Deep Dive, Backup Strategies, and others.

Working with individual contributors as well as managers, I realized that most were also facing serious challenges when it came to cybersecurity.

Digging deeper, it became clear that there was a lack of training for AppSec specifically. As we explore in the course, XSS is far too common and can be devastating to organizations, regardless of their size.

It’s time to take security into our own hands and to learn how to build more secure software in order to help make the world a safer place! Join me in the course, and we’ll do just that!

I welcome you on your journey to learning more about XSS, and I look forward to being your instructor!
Who this course is for:

   Web Developers
   Pentesters
   Software Developers
   Application Security Engineers
   IT Managers
   Risk Analysts
   Security Analysts
   IT Students

Requirements

   Experience with JavaScript
   Experience working with web applications
   A desire to learn!

Last Updated 12/2020
YouTube 视频:
类别:Tutorials
语言:English  English
总大小:2.09 GB
哈希信息:D03AE09A788F70579F69B2497A7AF46C787B445F
增加:tutsnode Verified UploaderVIP
加入的日期:2020-12-25 00:24:18
洪流地位:Torrent Verified


评级:Not Yet Rated (Log in to rate it)


Tracker:
udp://inferno.demonoid.pw:3391/announce

这个洪流也有备份的纤夫
URL播种机懒鬼已完成
udp://inferno.demonoid.pw:3391/announce000
udp://tracker.openbittorrent.com:80/announce0010
udp://tracker.opentrackr.org:1337/announce1241
udp://torrent.gresille.org:80/announce000
udp://glotorrents.pw:6969/announce000
udp://tracker.leechers-paradise.org:6969/announce000
udp://tracker.pirateparty.gr:6969/announce000
udp://tracker.coppersurfer.tk:6969/announce000
udp://ipv4.tracker.harry.lu:80/announce000
udp://9.rarbg.to:2710/announce000
udp://shadowshq.yi.org:6969/announce000
udp://tracker.zer0day.to:1337/announce000


文件列表: 





Comments
无可奉告，仍将过帐