Skip to main content
CourseFlix

Web Hacking: Become a Professional Web Pentester

7h 58m 4s
English
Paid

Become an expert web pentester with this comprehensive hands-on course! Dive deep into the world of web security by learning exploitation techniques, hacking tools, and methodologies through real-world applications. Develop your skills in a practical environment using open-source software and prepare to conduct web security assessments as an ethical hacker.

Course Overview

Welcome to the web application hacking course led by Geri! If you're curious about hacking and IT security, you've found the ideal starting point. This course is tailored for developers, IT administrators, or anyone with an IT background looking to pursue a career in web penetration testing. You'll gain all the necessary skills to kickstart your journey as a professional in this thriving field.

Why Pursue Web Hacking?

The excitement and creativity: The art of hacking is thrilling and allows you to adopt the perspective of an attacker. You'll discover vulnerabilities, exploit them, and even seize control over systems, unleashing the hacker within you.

Career opportunities: The security industry is booming. There's a significant demand for penetration testers, and you'll often receive lucrative job offers. There are ample opportunities for growth, making it a compelling career prospect as an ethical white hat hacker.

Importance of Web Hacking

There's a huge market demand for web pentesting expertise. Approximately 80% of penetration projects are web-related, making it essential to learn. With web technologies being primarily text-based, they are easier to grasp, positioning web pentesting as a logical career starting point.

About the Instructor

Meet Geri: A seasoned penetration tester based in Germany. Geri's vast experience spans multiple technologies and environments, providing a rich learning experience for students. Having transitioned from a software quality engineer to a pentester, Geri brings real-world insights into the course, ensuring relevant and essential training.

  • Conference speaker with impressive credentials (Google his name!)
  • Creator of a popular online hacking course with over 20,000 students
  • Offers firsthand knowledge in entering and succeeding in the pentesting field

Course Structure

This course is designed to be highly practical and hands-on. You'll hack real open-source applications and experiment with diverse techniques and attacks. The course covers core essentials without overpromising completeness. In IT, learning never truly ends, allowing you to keep expanding your knowledge continually.

Course Benefits

  1. Endless learning opportunities: With constant technological advancements, there's always something new to explore.
  2. Job security: Continuous system developments lead to new projects due to inherent security flaws, ensuring a steady demand for experts.

Course Requirements

  • An IT background is necessary.
  • Basic user-level understanding of virtual machine tools such as VMWare or VirtualBox is required.

Who Should Enroll

  • Developers aiming to secure web applications.
  • Individuals aspiring to become penetration testers.
  • Experienced penetration testers wanting to focus on web applications.
  • IT professionals and students interested in web hacking.

What You'll Learn

  • The fun aspects of hacking
  • Identifying and fixing web security issues
  • Discovering vulnerabilities in web applications
  • Starting a career in web application penetration testing
  • Understanding traditional and modern web applications
  • Ethical hacking processes and best practices
  • Gaining practical skills in exploiting web applications
  • Conducting ethical hacking projects professionally
  • Insights into the workings of professional penetration testing

About the Author: Udemy

Udemy thumbnail

Udemy is the largest open marketplace for online courses on the internet. Founded in 2010 by Eren Bali, Oktay Caglar, and Gagan Biyani and headquartered in San Francisco, the company went public on the Nasdaq in 2021 under the ticker UDMY. The platform hosts well over two hundred thousand courses across software development, IT and cloud, data science, design, business, marketing, and creative skills, taught by tens of thousands of independent instructors. Roughly seventy million learners use it worldwide, and the corporate arm — Udemy Business — supplies a curated subset of that catalog to enterprise customers.

Because Udemy is a marketplace rather than a single editorial publisher, the catalog is uneven by design. The strongest material lives in the long-form, project-based courses authored by working engineers — full-stack JavaScript, React, Node.js, Python data science, AWS, Docker and Kubernetes, mobile development with Flutter and React Native, and cloud certification preparation. The CourseFlix listing under this source is the slice of that catalog that has been mirrored here for offline-friendly viewing, organized by topic and updated as new releases land. Pricing on Udemy itself swings dramatically with the site's near-permanent sales, which is why the platform is best treated as a deep reference catalog: pick instructors with strong reviews and a track record of updating their material rather than buying on the headline price alone.

Watch Online 50 lessons

This is a demo lesson (10:00 remaining)

You can watch up to 10 minutes for free. Subscribe to unlock all 50 lessons in this course and access 10,000+ hours of premium content across all courses.

View Pricing
0:00
/
#1: Introduction
All Course Lessons (50)
#Lesson TitleDurationAccess
1
Introduction Demo
03:34
2
Disclaimer
01:35
3
Methodology
04:52
4
In this section
01:26
5
Setting up the target
08:57
6
Setting up Kali
14:38
7
Setting up the Burp Suite
09:04
8
In this section
00:41
9
How HTTP works
12:37
10
Static HTML
10:19
11
PHP and friends
14:26
12
Modern MVC frameworks
30:01
13
Javascript
14:41
14
Manual discovery
16:52
15
Automated discovery
11:47
16
Session management intro
13:34
17
Session fixation
11:12
18
Weak logout
04:41
19
Same origin policy
07:06
20
CSRF
19:59
21
Securing the session
05:23
22
SSL/TLS
19:59
23
Authentication bypass
07:54
24
Unauthenticated URL access
06:08
25
Password quality
03:30
26
Password brute force
08:02
27
Default accounts
02:38
28
Weak password recovery
04:49
29
Mitigations
03:29
30
Authorization Intro
04:54
31
Manipulating variables
05:16
32
Client side authentication
04:27
33
Mitigations
02:24
34
Reflected XSS
18:01
35
Stored XSS
10:31
36
HTTP header injection
10:55
37
Malicious URL redirection
14:05
38
Exploiting wrong content-type
08:30
39
Mitigations
04:10
40
Malicious file upload
14:24
41
LFI and RFI
14:22
42
OS command injection
13:37
43
SQL injection
17:52
44
UNION Select Attack
12:52
45
Blind SQL injection
13:53
46
Automating SQLi testing
12:05
47
Mitigations
04:08
48
Reporting
05:39
49
Checklist
04:34
50
What's next
07:31
Unlock unlimited learning

Get instant access to all 49 lessons in this course, plus thousands of other premium courses. One subscription, unlimited knowledge.

Learn more about subscription

Course content

50 lessons · 7h 58m 4s
Show all 50 lessons
  1. 1 Introduction 03:34
  2. 2 Disclaimer 01:35
  3. 3 Methodology 04:52
  4. 4 In this section 01:26
  5. 5 Setting up the target 08:57
  6. 6 Setting up Kali 14:38
  7. 7 Setting up the Burp Suite 09:04
  8. 8 In this section 00:41
  9. 9 How HTTP works 12:37
  10. 10 Static HTML 10:19
  11. 11 PHP and friends 14:26
  12. 12 Modern MVC frameworks 30:01
  13. 13 Javascript 14:41
  14. 14 Manual discovery 16:52
  15. 15 Automated discovery 11:47
  16. 16 Session management intro 13:34
  17. 17 Session fixation 11:12
  18. 18 Weak logout 04:41
  19. 19 Same origin policy 07:06
  20. 20 CSRF 19:59
  21. 21 Securing the session 05:23
  22. 22 SSL/TLS 19:59
  23. 23 Authentication bypass 07:54
  24. 24 Unauthenticated URL access 06:08
  25. 25 Password quality 03:30
  26. 26 Password brute force 08:02
  27. 27 Default accounts 02:38
  28. 28 Weak password recovery 04:49
  29. 29 Mitigations 03:29
  30. 30 Authorization Intro 04:54
  31. 31 Manipulating variables 05:16
  32. 32 Client side authentication 04:27
  33. 33 Mitigations 02:24
  34. 34 Reflected XSS 18:01
  35. 35 Stored XSS 10:31
  36. 36 HTTP header injection 10:55
  37. 37 Malicious URL redirection 14:05
  38. 38 Exploiting wrong content-type 08:30
  39. 39 Mitigations 04:10
  40. 40 Malicious file upload 14:24
  41. 41 LFI and RFI 14:22
  42. 42 OS command injection 13:37
  43. 43 SQL injection 17:52
  44. 44 UNION Select Attack 12:52
  45. 45 Blind SQL injection 13:53
  46. 46 Automating SQLi testing 12:05
  47. 47 Mitigations 04:08
  48. 48 Reporting 05:39
  49. 49 Checklist 04:34
  50. 50 What's next 07:31

Related courses

Frequently asked questions

What is Web Hacking: Become a Professional Web Pentester about?
Become an expert web pentester with this comprehensive hands-on course! Dive deep into the world of web security by learning exploitation techniques, hacking tools, and methodologies through real-world applications. Develop your skills in…
Who teaches Web Hacking: Become a Professional Web Pentester?
Web Hacking: Become a Professional Web Pentester is taught by Udemy. You can find more courses by this instructor on the corresponding source page.
How long is Web Hacking: Become a Professional Web Pentester?
Web Hacking: Become a Professional Web Pentester contains 50 lessons with a total runtime of 7 hours 58 minutes. All lessons are available to watch online at your own pace.
Is Web Hacking: Become a Professional Web Pentester free to watch?
Web Hacking: Become a Professional Web Pentester is part of CourseFlix's premium catalog. A CourseFlix subscription unlocks the full video player; the course description, table of contents, and preview information are available to everyone.
Where can I watch Web Hacking: Become a Professional Web Pentester online?
Web Hacking: Become a Professional Web Pentester is available to watch online on CourseFlix at https://courseflix.net/course/web-hacking-become-a-professional-web-pentester. The page hosts every lesson with the integrated video player; no download is required.