Professional Bug Hunting

Professional Bug Hunting

Course Description

Koyon yadda ake gano bugs da security vulnerabilities a cikin app ko website -wato bug hunting, tare da ethical hacking da penetration testing. Ana bukatar computer.

Abubuwan da za ka koya
-Basic Commands na Linux
-Installing na Burp Suite
-Setup Na Masu Aiki Windows OS
-Yanda Internet Yake Aiki, Server, Client, Request, Response
-Bayanin HTTP Status Codes
-Me ake Nufi da Bugs
-Registration Web Security Academy Domin Samun Access na Labs
-Google Dorking
-Subdomain Enumeration
-Content Discovery
-Username enumeration via different responses - Authentication Vulnerabilities
-Username enumeration via subtly different responses
-Username enumeration via response timing
-2FA simple bypass
-2FA broken logic
-Brute-forcing a stay-logged-in cookie
-Offline password cracking
-Password reset poisoning via middleware
-Reflected XSS into HTML context with nothing encoded - Cross Site Scripting
-Stored XSS into HTML context with nothing encoded
-DOM XSS in document.write sink using source location.search
-Limit overrun race conditions - Race Conditions Vulnerabilities
-Bypassing rate limits via race conditions
-File path traversal, simple case - Path Traversal Vulnerabilities
-File path traversal, traversal sequences blocked with absolute path bypass
-OS command injection, simple case - Command Injection Vulnerabilities
-Unprotected admin functionality - Access Control Vulnerabilities
-Unprotected admin functionality with unpredictable URL
-User role controlled by request parameter
-User role can be modified in user profile
-User ID controlled by request parameter
-User ID controlled by request parameter, with unpredictable user IDs
-User ID controlled by request parameter with data leakage in redirect
-User ID controlled by request parameter with password disclosure
-Insecure direct object references
-SQL injection vulnerability in WHERE clause allowing retrieval of hidden data - SQL Injection Vulnerabilities
-SQL injection vulnerability allowing login bypass
-Remote code execution via web shell upload - File Upload Vulnerabilities
-CSRF vulnerability with no defenses - CSRF Vulnerabilities
-Basic SSRF against the local server - SSRF Vulnerabilities
-Basic SSRF against another back-end system
-Real World RXSS
-Yanda ake aiki da Sqlmap
-Broken Link Hijack
-Hacking CMS
-Open Redirect
-Subdomain Takeover
-Automated Vulnerability Scanning
-Mu fara hunting kawai

Wanne amfani wannan ilimin zai maka bayan ka kammala?
-Sanin muhimman abubuwa dangane da yanar gizo da yadda take aiki

-Yadda za ka gano security vulnerabilities a shafi ko app

-Za ka zama Bug Hunter

Abubuwan da ke bukata don farawa
-Computer
-Ilimin Cyber Security

Malami: Engr Ibrahim Auwal

Mataki: Beginner, Intermediate, and Advanced

Yare: Hausa

Course Benefits

  • World-class Course
  • One-on-One Mentorship
  • Big Internship Opportunities
  • In Local Language
  • Affordable Pricing
  • On-Demand Learning
  • Free Certificate

Course Fee

₦17500

Tutor

Engr. Ibrahim Auwal

Engr. Ibrahim Auwal

Engr. Ibrahim Auwal

Masanin yanar gizo kuma kwararren Cyber Security Analyst, wanda ya goge game da harkar gano security vulnerabilities a cikin website/app kuma yake koyar da shi ga daruruwan mutane.

Get Started