OWASP Top 10 2017: Exploit and Mitigation
Web Application Pentesting and Mitigations
- Description
- Curriculum
- FAQ
- Reviews
We will be looking at the OWASP Top 10 web attacks 2017. Students are going to understand each attack by practicing them on their own with the help of this course. We will use Mutillidae 2 Vulnerable Web Application for all attack practice. We will start from setting up the lab to exploiting each vulnerability.
This course not just focuses on attacks but also helps understanding the mitigations for each vulnerability.
Students will understand the mitigations through Secure Source Codes and Best Practices provided in this course that should be followed by the developers to protect their web application from these vulnerabilities.
Mutillidae Lab Setup
Exploiting Mutillidae
Mitigations
-
3
Union Based Injection -
4
Command Injection
-
5
Authentication Bypass
-
6
Injection Using Sqlmap
-
7
Login Bruteforce
-
8
User Enumeration
-
9
Sensitive Data Exposure
-
10
"Secret" Administrative Page
-
11
XML External Entities
-
12
Local File Inclusion
-
13
Text File Viewer
-
14
Missing Function Level Access Control
-
15
Privilege Escalation
-
16
Directory Browsing
-
17
Reflected XSS
-
18
Stored XSS
-
19
DOM Based XSS
-
20
Insecure Deserialization
-
21
Using Components with Known Vulnerabilities
-
22
Insufficient Logging and Monitoring
How long do I have access to the course materials?
You can view and review the lecture materials indefinitely, like an on-demand channel.
Can I take my courses with me wherever I go?
Definitely! If you have an internet connection, courses on Udemy are available on any device at any time. If you don't have an internet connection, some instructors also let their students download course lectures. That's up to the instructor though, so make sure you get on their good side!
Stars 5
5
Stars 4
6
Stars 3
1
Stars 2
0
Stars 1
2
Course available for 2 days
Course details
Video
2 hours
Certificate of Completion
Full lifetime access
Access on mobile and TV
Popular courses
