Professional Bug Hunting


Game da Course

Ilimin yadda ake gano bugs da security vulnerabilities a app ko websites -wato bug hunting, tare da ethical hacking da penetration testing. Ana bukatar computer. Idan ka gama wannan course din za ka iya zama bug hunter wanda za ka iya amfani da ilimin da ka koya don nemo bugs a shafuka.

Abubuwan da za ka koya
Abubuwan da za ka koya
  • Basic Commands na Linux
  • Installing na Burp Suite
  • Setup Na Masu Aiki Windows OS
  • Yanda Internet Yake Aiki, Server, Client, Request, Response
  • Bayanin HTTP Status Codes
  • Me ake Nufi da Bugs
  • Registration Web Security Academy Domin Samun Access na Labs
  • Google Dorking
  • Subdomain Enumeration
  • Content Discovery
  • Username enumeration via different responses - Authentication Vulnerabilities
  • Username enumeration via subtly different responses
  • Username enumeration via response timing
  • 2FA simple bypass
  • 2FA broken logic
  • Brute-forcing a stay-logged-in cookie
  • Offline password cracking
  • Password reset poisoning via middleware
  • Reflected XSS into HTML context with nothing encoded - Cross Site Scripting
  • Stored XSS into HTML context with nothing encoded
  • DOM XSS in document.write sink using source location.search
  • Limit overrun race conditions - Race Conditions Vulnerabilities
  • Bypassing rate limits via race conditions
  • File path traversal, simple case - Path Traversal Vulnerabilities
  • File path traversal, traversal sequences blocked with absolute path bypass
  • OS command injection, simple case - Command Injection Vulnerabilities
  • Unprotected admin functionality - Access Control Vulnerabilities
  • Unprotected admin functionality with unpredictable URL
  • User role controlled by request parameter
  • User role can be modified in user profile
  • User ID controlled by request parameter
  • User ID controlled by request parameter, with unpredictable user IDs
  • User ID controlled by request parameter with data leakage in redirect
  • User ID controlled by request parameter with password disclosure
  • Insecure direct object references
  • SQL injection vulnerability in WHERE clause allowing retrieval of hidden data - SQL Injection Vulnerabilities
  • SQL injection vulnerability allowing login bypass
  • Remote code execution via web shell upload - File Upload Vulnerabilities
  • CSRF vulnerability with no defenses - CSRF Vulnerabilities
  • Basic SSRF against the local server - SSRF Vulnerabilities
  • Basic SSRF against another back-end system
  • Real World RXSS
  • Yanda ake aiki da Sqlmap
  • Broken Link Hijack
  • Hacking CMS
  • Open Redirect
  • Subdomain Takeover
  • Automated Vulnerability Scanning
  • Mu fara hunting kawai
Kayan Aiki
  1. Computer

Abubuwan da za ka mora
🎁 World-Class Courses – muna da quality kuma valuable courses daga kwararru

📌 FREE One-on-One Mentorship – za mu ba ka direct access da kwararren malami a matsayin mentor, shi ma kyauta

🌍 Big Internship Opportunities – za ka samu damar cike gurbin internship sannan a tura ka kamfanoni don yi musu aiki

💯 In Hausa Language – muna koyarwa da harshen Hausa don a fahimta sosai cikin sauki

🚀 Affordable Pricing – karatunmu a araha ne kamar kyauta, kowanne course ana biyan kasa da ₦30,000

🎯 No Monthly Subscription – idan ka biya sau daya, babu bukatar ka sake biya kuma za ka samu lifetime access

On-Demand Learning – za ka iya karatu duk lokacin da kake so kuma a duk inda kake

🎓 Free Certificate – za mu ba ka certificate kyauta bayan ka kammala karatu

Mataki: Beginner, Intermediate, da Advanced

Yare: Hausa

Kudin Shiga: ₦15,000

Malami Engr. Ibrahim Auwal
Engr. Ibrahim Auwal Engr. Ibrahim Auwal Masanin yanar gizo kuma kwararren Cyber Security Analyst, wanda ya goge game da harkar gano security vulnerabilities a cikin website/app kuma yake koyar da shi ga daruruwan mutane.

Daga Bakin Dalibai

Mubarak Umar

Masha Allah. Allah kara basira

Nuru Abdulmumin Abdullahi

mashaa Allah karatu yana mana dadi

Faisal Imran Auchan

Really appreciate 🙏

Sadeek Net

MashaAllah Alhamdulillah,


Get Started Now

Share this course: