Web Hacking - Live Online Training

NotSoSecure, a Claranet Group Company, is a global penetration testing and hacking training company founded in the UK with presence in USA and India.NotSoSecure works with Fortune 500 companies and global start-ups alike, helping them improve their security by identifying security gaps and risks in their systems, raising security skill levels and improving application development methodologies. NotSoSecure is one of the largest training providers at Black Hat conferences and trains hundreds of individuals throughout the year.Our trainers are also pen testers and we use a research led approach to ensure our training and testing is always of the highest quality.WE HACK. WE TEACH

NotSoSecure Global Services Ltd

Bring your technical cybersecurity skills up to the industry standard by training with our experienced, practicing penetration testers.

<h3><strong>This is an entry-level web application security testing course and also a recommended pre-requisite course before enrolling for our “Advanced Web Hacking” course. This foundation course of “Web Hacking” familiarises the attendees with the basics of web application and web application security concerns. A number of tools and techniques, backed up by a systematic approach on the various phases of hacking will be discussed during this 2-day course. If you would like to step into a career of Ethical Hacking / Pen Testing with the right amount of knowledge, this is the right course for you.</strong></h3><h3>This course familiarises you with a wealth of tools and techniques required to breach and compromise the security of web applications. The course starts by discussing the very basics of web application concepts, and gradually builds up to a level where you can not only use the tools and techniques to hack various components involved in a web application, but also walk away with a solid understanding of the concepts on which these tools are based. The course will also talk about industry standards such as OWASP Top 10 and PCI DSS which form a critical part of web application security. Numerous real life examples will be discussed during the course to help you understand the true impact of these vulnerabilities.</h3><h3></h3><h3>What's the real impact of training your team through NotSoSecure?</h3><p> Start to build the skills within your team to harden your perimeter, lower the risk of compromise, and make your organisation a less attractive target for attackers. Trained delegates can:</p><ul><li>Confidently articulate the intricacies of the HTTP protocol and how it can be manipulated to achieve a malicious goal </li><li>Understand how to use industry-standard tools, such as Burpsuite, to perform manual penetration testing against web applications</li><li>Find  and exploit vulnerabilities in web applications, including those that would lead to injection attacks, authorisation and bypass authentication, malicious file uploads, and more</li><li>Identify the infrastructure and frameworks underlying a web attack surface</li><li>Understand complications related to cryptography and the effect on web applications</li><li>Understand how to tie security testing and other offensive and defensive measures back to authentic attack vectors</li></ul><h3></h3><h3>Who Should Attend</h3><ul><li>Security enthusiasts</li><li>Anybody who wishes to make a career in this domain and gain some knowledge of networks and applications</li><li>Web Developers</li><li>System Administrators</li><li>SOC Analysts </li><li>Network Engineers</li><li>Pen Testers who are wanting to level up their skills</li></ul><h3></h3><h3>Prerequisites</h3><p>Delegates should bring their laptop with windows operating system installed (either natively or running in a VM). Further, Delegates must have administrative access to perform tasks such as installing software, disabling antivirus etc. Devices that don’t have an Ethernet connection (e.g. MacBook Air, tablets etc.) will not be supported during the course.</p><p></p><h3>Course Outline</h3><p><strong>UNDERSTANDING THE HTTP PROTOCOL</strong></p><ul><li>HTTP Protocol Basics</li><li>Introduction to proxy tools </li></ul><p><strong>INFORMATION GATHERING</strong></p><ul><li>Enumeration Techniques</li><li>Understanding Web Attack surface</li></ul><p><strong>USERNAME ENUMERATION &amp; FAULTY PASSWORD RESET</strong></p><ul><li>Attacking Authentication and Faulty Password mechanisms </li></ul><p><strong>ISSUES WITH SSL/TLS</strong></p><ul><li>SSL/TLS misconfiguration AUTHORIZATION BYPASS</li><li> Logical Bypass techniques </li><li>Session related issues </li></ul><p><strong>CROSS SITE SCRIPTING (XSS)</strong></p><ul><li>Various types of XSS </li><li>Session Hijacking &amp; other attacks</li></ul><p><strong>CROSS SITE REQUEST FORGERY (CSRF)</strong></p><ul><li>Understanding CSRF attack SQL INJECTION</li><li>SQL Injection types</li><li>Manual Exploitation</li></ul><p><strong>XML EXTERNAL ENTITY (XXE) ATTACKS</strong></p><ul><li>XXE Basics</li><li>XXE exploitation INSECURE FILE UPLOADS</li><li>Attacking File upload functionality </li></ul><p><strong>DESERIALIZATION VULNERABILITIES</strong></p><ul><li>Serialization Basics</li><li>PHP Deserialization Attack</li></ul><h3></h3><h3>What will this course cover?</h3><p>To view the full course outline please <a href="https://www.notsosecure.com/hacking-training/web-hacking/" target="_blank" data-msys-clicktrack="0" rel="nofollow noopener noreferrer">click here</a></p><h3></h3><h3>Refunds</h3><p>Refunds available if notice is given before at least 7 days before the event date</p>

Our {communityGuidelinesLink} describe the sort of content we prohibit on Eventbrite. If you suspect an event may be in violation, you can report it to us so we can investigate.

To report other categories of prohibited or illegal content, submit {link}

Web Hacking - Live Online Training

More events from NotSoSecure Global Services Ltd

Discover more events from NotSoSecure Global Services Ltd, from Science & Tech to other experiences you might love.

Still looking for the right event?

Explore all online events to browse and filter by date, category, and more.

Web Hacking - Live Online Training

More events from NotSoSecure Global Services Ltd

Discover more events from NotSoSecure Global Services Ltd, from Science & Tech to other experiences you might love.

More Science & Tech events

Browse more Science & Tech events with different dates, prices, and formats to find your next great experience.

Still looking for the right event?

Explore all online events to browse and filter by date, category, and more.