Back

Hacking Web Applications

Whether you’re a curious learner, aspiring ethical hacker, or someone who wants to secure their own website, this course provides an easy-to-follow and comprehensive pathway to mastering the basics of website hacking.

Tarek

Lead Trainer

5 hr

31 lectures

Premium · $120 billed annuallyFrom $10/month
Description

Course Curriculum

Reconnaissance, Enumeration, and Analysis

7 lessons

Subdomain Enumeration

Premium

00:00

Reconnaissance (Passive & Active)

Premium

00:00

Directory and File Brute-Forcing

Premium

00:00

Fuzzing Parameters

Premium

00:00

Technology Stack Identification

Premium

00:00

Business Logic Mapping

Premium

00:00

Lab: Recon + Enumeration

Premium
Cracking Identity

6 lessons

Identity & Authentication

Premium

00:00

Credential Attacks and Rate-Limiting Bypass

Premium

00:00

MFA and Other Authentication Mechanisms

Premium

00:00

Session Hijacking, Fixation, and Cookie Poisoning

Premium

00:00

Lab: Auth Attack Scenarios

Premium

Session Hijacking, Fixation, and Cookie Poisoning

Premium

00:00

Access Control & Authorization Failures

4 lessons

Access Control Fundamentals (Authentication vs Authorization)

Premium

00:00

Broken Access Control (BAC) Concepts and Patterns

Premium

00:00

Insecure Direct Object Reference (IDOR)

Premium

00:00

Lab: IDOR + Privilege Boundary Testing (horizontal + vertical access control checks)

Premium
Client-Side Attacks and Browser Trust

7 lessons

Client vs Server Execution

Premium

00:00

Cross-Site Scripting (XSS) Fundamentals

Premium

00:00

XSS Types (Reflected, Stored, DOM-Based)

Premium

00:00

HTML Injection and UI Deception

Premium

00:00

Cross-Site Request Forgery (CSRF)

Premium

00:00

Open Redirects and Trust Abuse

Premium

00:00

Lab: XSS + CSRF Testing in Burp (confirm execution + validate impact + apply defenses checks)

Premium
Exploiting the Back-End

4 lessons

Lab: Backend Exploitation Chain (SQLi/Command Injection/SSRF based on app endpoints)

Premium

Server-Side Request Forgery (SSRF)

Premium

00:00

OS Command Injection

Premium

00:00

SQL Injection

Premium

00:00

CMS Pentesting and Attacking

3 lessons

Lab: CMS Attack Walkthrough

Premium

Attacking CMS

Premium

00:00

Content Management System Introduction

Premium

00:00