Professional Bug Hunting

Game da Course

Koyon yadda ake gano bugs da security vulnerabilities a cikin app ko website -wato bug hunting, tare da ethical hacking da penetration testing. Ana bukatar computer.

Abubuwan da za ka koya

Abubuwan da za ka koya

• Basic Commands na Linux
• Installing na Burp Suite
• Setup Na Masu Aiki Windows OS
• Yanda Internet Yake Aiki, Server, Client, Request, Response
• Bayanin HTTP Status Codes
• Me ake Nufi da Bugs
• Registration Web Security Academy Domin Samun Access na Labs
• Google Dorking
• Subdomain Enumeration
• Content Discovery
• Username enumeration via different responses - Authentication Vulnerabilities
• Username enumeration via subtly different responses
• Username enumeration via response timing
• 2FA simple bypass
• 2FA broken logic
• Brute-forcing a stay-logged-in cookie
• Offline password cracking
• Password reset poisoning via middleware
• Reflected XSS into HTML context with nothing encoded - Cross Site Scripting
• Stored XSS into HTML context with nothing encoded
• DOM XSS in document.write sink using source location.search
• Limit overrun race conditions - Race Conditions Vulnerabilities
• Bypassing rate limits via race conditions
• File path traversal, simple case - Path Traversal Vulnerabilities
• File path traversal, traversal sequences blocked with absolute path bypass
• OS command injection, simple case - Command Injection Vulnerabilities
• Unprotected admin functionality - Access Control Vulnerabilities
• Unprotected admin functionality with unpredictable URL
• User role controlled by request parameter
• User role can be modified in user profile
• User ID controlled by request parameter
• User ID controlled by request parameter, with unpredictable user IDs
• User ID controlled by request parameter with data leakage in redirect
• User ID controlled by request parameter with password disclosure
• Insecure direct object references
• SQL injection vulnerability in WHERE clause allowing retrieval of hidden data - SQL Injection Vulnerabilities
• SQL injection vulnerability allowing login bypass
• Remote code execution via web shell upload - File Upload Vulnerabilities
• CSRF vulnerability with no defenses - CSRF Vulnerabilities
• Basic SSRF against the local server - SSRF Vulnerabilities
• Basic SSRF against another back-end system
• Real World RXSS
• Yanda ake aiki da Sqlmap
• Broken Link Hijack
• Hacking CMS
• Open Redirect
• Subdomain Takeover
• Automated Vulnerability Scanning
• Mu fara hunting kawai

Abubuwan da ake bukata don farawa

1. Computer