
Chương 1: Giới thiệu Security & Hacking, Penetration Testing
Chương 2: Burp Suite 101
Chương 3: Giới thiệu Web Application:
+ Giới thiệu Web Application
+ Web Application Layout
+ Frontend & Backend
Chương 4: Thu thập thông tin bằng câu lệnh FFUF
+ Introduce
+ Web Fuzzing
+ Directory Fuzzing
+ Page Fuzzing
+ Recusive Fuzzing
+ DNS Record
+ Sub-Domain Fuzzing
Chương 5: LOGIN BRUTE FORCING
+ Introduce
+ Basic HTTP Auth Brute Forcing
- Password Attacks
- Default Passwords
- Username Brute Force
Chương 6: Cross-site scripting
+ Reflected XSS
+ Stored XSS
+ DOM-based XSS
+ Client-side template injection
+ Content security policy
Chương 7: Cross-site request forgery (CSRF)
+ XSS vs CSRF
+ Bypassing CSRF token validation
+ Bypassing SameSite cookie restrictions
+ How to prevent CSRF vulnerabilities
Chương 8 : File Vulnerabilites: File Upload, Path Traversal
+ File Upload, Path Traversal
Chương 9 : Injection Vulnerablities: Command Injection, SQL Injection
+ Command Injection
+ SQL INJECTION
- UNION ATTACKS
- BLIND SQL INJECTION
Chương 10 : XML external entity (XXE) injection
+ (XXE) injection
+ XML entities
+ Blind XXE vulnerabilities
Đoàn Thị Hương