Introduction of Web Security

About this course

In this course, you will learn everything about the basic of offensive web security from scratch with zero IT knowledge. Students enrolled in the program will learn modern web security vulnerability classes and how to identify security flaws in web applications.  The methodology for the course includes:1) Introduction of new web concept/terminology2) Vulnerability illustrations and basic programming3) Lab exercises to reinforce learningCourse outline-----------------1. HTTP basics2. User interaction attack3. Client data disclosure attack4. Security bypasses [Still uploading...]5. Basic of Python language [Still uploading...]6. Introduction of Server and backend setup [Still uploading...]7. Server-side information disclosure [Still uploading...]8. Attack file upload function [Still uploading...]9. Command injection and Web Application Firewall (WAF) bypass [Still uploading...]The only way to learn is through hands-on experience. I believe learning through just theory and concepts will not allow students to fully understand the security flaws that were introduced. Therefore, in this course, I have prepared a number of lab exercises that allow students to fully understand the security concept that was introduced to them.The course will begin covering the basic concept of HTTP (Hypertext Transfer Protocol) and move on to covering client-side security vulnerabilities. After which, before diving into the server-side vulnerability, the course would introduce some basic Python programming language to give students the advantage to read code and be able to conduct a low-level code review to identify the root cause of the vulnerability.Honed with this knowledge, the student can also participate in Bug bounty or Vulnerability Disclosure programs to begin building up their portfolios and create a foothold in the security field.

Course objectives

• equip students with practical skills to recognize and address web security flaws
• provide foundational knowledge necessary for participating in bug bounty programs