Basic Computer Knowledge
0:00 - Introduction/whoami
6:43 - A Day in the Life of an Ethical Hacker
27:44 - Effective Notekeeping
34:27 - Important Tools
39:51 - Networking Refresher: Introduction
41:06 - IP Addresses
54:18 - MAC Addresses
57:35 - TCP, UDP, & the Three-Way Handshake
1:02:51 - Common Ports & Protocols
1:09:04 - The OSI Model
1:14:39 - Subnetting, Part 1
1:41:42 - Subnetting, Part 2
1:46:01 - Installing VMWare / VirtualBox
1:52:19 - Installing Kali Linux
1:57:55 - Configuring VirtualBox
2:01:17 - Kali Linux Overview
2:04:48 - Sudo Overview
2:10:05 - Navigating the File System
2:28:22 - Users & Privileges
2:45:21 - Common Network Commands
2:53:51 - Viewing, Creating, & Editing Files
3:00:16 - Starting and Stopping Services
3:06:38 - Installing and Updating Tools
3:18:35 - Bash Scripting
3:41:14 - Intro to Python
3:43:37 - Strings
3:51:00 - Math
3:56:45 - Variables & Methods
4:07:05 - Functions
4:16:03 - Boolean Expressions and Relational Operators
4:24:37 - Conditional Statements
4:31:35 - Lists
4:43:48 - Tuples
4:45:59 - Looping
4:50:28 - Advanced Strings
5:03:08 - Dictionaries
5:09:32 - Importing Modules
5:15:30 - Sockets
5:23:11 - Building a Port Scanner
5:41:44 - User Input
5:50:22 - Reading and Writing Files
6:00:18 - Classes and Objects
6:08:10 - Building a Shoe Budget Tool
6:22:32 - The 5 Stages of Ethical Hacking
6:27:52 - Passive Recon Overview
6:35:29 - Identifying Our Target
6:39:06 - Discovering Email Addresses
6:54:59 - Breached Credentials Part 1
7:02:21 - Breached Credentials Part 2
0:17 - Hunting Subdomains Part 1
5:54 - Hunting Subdomains Part 2
10:46 - Identifying Website Technologies
17:57 - Gathering Information w/ Burp Suite
26:49 - Google Fu
32:24 - Utilizing Social Media
38:05 - Installing Kioptrix
44:28 - Scanning w/ Nmap
1:04:16 - Enumerating HTTP/HTTPS Part 1
1:19:22 - Enumerating HTTP/HTTPS Part 2
1:34:35 - Enumerating SMB
1:48:59 - Enumerating SSH
1:53:11 - Researching Potential Vulnerabilities
2:08:05 - Our Notes So Far
2:11:15 - Scanning w/ Nessus Part 1
2:21:54 - Scanning w/ Nessus Part 2
2:28:07 - Reverse Shells vs Bind Shells
2:35:12 - Staged vs Non-Staged Payloads
2:38:37 - Gaining Root w/ Metasploit
2:46:21 - Manual Exploitation
2:59:06 - Brute Force Attacks
3:07:00 - Credential Stuffing & Password Spraying
3:21:07 - Our Notes, Revisited
3:24:56 - Downloading Our Materials
3:30:17 - Buffer Overflows Explained
3:34:29 - Spiking
3:44:46 - Fuzzing
3:50:59 - Finding the Offset
3:56:22 - Overwriting the EIP
3:59:51 - Finding Bad Characters
4:07:46 - Finding the Right Module
4:16:16 - Generating Shellcode and Gaining Root
4:22:16 - Python3 and More
4:36:01 - Capstone Introduction
4:41:47 - Setting up Blue
4:45:48 - Blue Walkthrough
5:02:53 - Academy Setup
5:05:22 - Academy Walkthrough
5:49:46 - Dev Walkthrough
6:15:10 - Butler Walkthrough
6:51:33 - Blackpearl Walkthrough
1:15 - NordPass Sponsorship
2:10 - Course Overview
3:46 - The OWASP Top 10
14:11 - Installing OWASP Juice Shop
21:00 - Installing Foxy Proxy
23:14 - Exploring Burp Suite
34:42 - Introducing the Score Board
37:33 - SQL Injection Overview
42:45 - SQL Injection Walkthrough
52:52 - SQL Injection Defenses
55:41 - Broken Authentication Attacks and Defenses
1:01:25 - Testing for Broken Authentication
1:09:05 - Sensitive Data Exposure Attacks and Defenses
1:13:58 - Testing for Sensitive Data Exposure
1:22:00 - XML External Entities (XXE) Overview
1:31:54 - XXE Attacks and Defenses
1:39:58 - Broken Access Control Overview
1:43:27 - Broken Access Control Walkthrough
1:47:55 - Security Misconfigurations Overview
1:52:54 - Cross-Site Scripting (XSS) Overview
2:03:27 - Reflected XSS Walkthrough
2:09:50 - Stored XSS Walkthrough
2:16:07 - Preventing XSS
2:19:55 - Insecure Deserialization
2:24:28 - Using Components with Known Vulnerabilities
2:29:06 - Insufficient Logging and Monitoring
5:13 - Important Disclaimer
7:37 - OSINT Overview
12:06 - Taking Effective Notes
20:09 - Introduction to Sock Puppets
22:52 - Creating Sock Puppets
37:19 - Search Engine Operators
1:00:39 - Reverse Image Searching
1:07:58 - Viewing EXIF Data
1:14:27 - Physical Location OSINT
1:23:43 - Identifying Geographical Locations
1:34:16 - Where in the World, Part 1
1:35:34 - Where in the World, Part 2
1:46:58 - Creepy OSINT
1:47:49 - Discovering Email Addresses
2:03:42 - Password OSINT - Introduction
2:07:25 - Hunting Breached Passwords Part 1
2:19:25 - Hunting Breached Passwords Part 2
2:29:23 - Hunting Usernames & Accounts
2:38:07 - Searching for People
2:47:54 - Voter Records
2:51:46 - Hunting Phone Numbers
3:03:04 - Discovering Birthdates
3:06:42 - Searching for Resumes
3:11:51 - Twitter OSINT Part 1
3:26:46 - Twitter OSINT Part 2
3:41:57 - Twitter OSINT Part 3
3:47:22 - Facebook OSINT
4:00:33 - Instagram OSINT
4:09:07 - Snapchat OSINT
4:11:37 - Reddit OSINT
4:17:32 - LinkedIn OSINT
4:25:41 - TikTok OSINT
0:52 - Episode 1 - Enumeration
1:26:51 - Episode 2 - Enumeration, XSS, and UI Bypassing
2:26:03 - Episode 3 - XSS, SQL Injection, and Broken Access Control
3:19:52 - Episode 4 - XXE, Input Validation, Broken Access Control, and More XSS
4:20:03 - Episode 5 - SQL Injections and Live Bug Bounty Hunting
1:23 - Downloading Our Materials
7:43 - Buffer Overflows Explained
11:56 - Spiking
22:12 - Fuzzing
28:26 - Finding the Offset
33:50 - Overwriting the EIP
37:19 - Finding Bad Characters
45:15 - Finding the Right Module
53:46 - Generating Shellcode & Gaining Root
59:46 - Python 3 & More
1:13:30 - TryHackMe Brainstorm Walkthrough
15:50 - Gaining a Foothold: Intro and Shell Access
23:13 - System Enumeration
29:28 - User Enumeration
34:27 - Network Enumeration
38:43 - Password Enumeration
44:41 - Automated Tools Intro
49:28 - Exploring Automated Tools
1:01:16 - Kernel Exploits Overview
1:04:45 - Escalation via Kernel Exploits
1:10:55 - Passwords and File Permissions Overview
1:11:37 - Escalation via Stored Passwords
1:20:14 - Escalation via Weak File Permissions
1:30:58 - Escalation via SSH Keys
1:36:45 - Sudo Overview
1:38:07 - Escalation via Sudo Shell Escaping
1:44:54 - Escalation via Intended Functionality
1:49:41 - Escalation via LD_PRELOAD
1:56:50 - Challenge Overview
1:58:16 - Challenge Walkthrough
2:11:07 - CVE-2019-14287 Overview
2:14:30 - Escalation via CVE-2019-14287
2:17:12 - Overview and Escalation via CVE-2019-18634
2:24:02 - SUID Overview
2:32:31 - Gaining a Foothold
2:45:41 - Escalation via SUID
11:52 - Gaining a Foothold
23:15 - Initial Enumeration
49:50 - Exploring Automated Tools
1:12:28 - Kernel Exploits
1:30:32 - Passwords and Port Forwarding
1:59:28 - Windows Subsystem for Linux
2:25:26 - Impersonation Attacks
2:52:29 - getsystem
2:56:28 - RunAs
04:02 - Installing VMWare / VirtualBox
10:17 - Installing Linux
15:50 - Configuring VirtualBox
19:06 - Installing PMK
21:44 - Active Directory Overview
26:58 - Physical Active Directory Components
32:45 - Logical Active Directory Components
40:12 - AD Lab Overview
43:13 - Cloud Lab Alternative
45:17 - Downloading the Necessary ISOs
48:06 - Setting up the Domain Controller
1:01:45 - Setting Up the User Machines
1:09:38 - Setting Up Users, Groups, and Policies
1:25:23 - Joining Our Machines to the Domain
1:34:11 - Initial AD Attacks Overview
1:38:07 - LLMNR Poisoning Overview
1:45:34 - Capturing NTLMv2 Hashes with Responder
1:50:20 - Password Cracking with Hashcat
2:01:52 - LLMNR Poisoning Defenses
2:04:41 - SMB Relay Attacks Overview
2:10:03 - Quick Lab Update
2:11:02 - Discovering Hosts with SMB Signing Disabled
2:14:40 - SMB Relay Attacks Part 1
2:19:34 - SMB Relay Attacks Part 2
2:23:40 - SMB Relay Attack Defenses
2:26:15 - Gaining Shell Access
2:34:02 - IPv6 Attacks Overview
2:38:03 - Installing mitm6
2:39:20 - Setting up LDAPS
2:41:43 - IPv6 DNS Attacks
2:49:27 - IPv6 Attack Defenses
2:52:27 - Passback Attacks
2:57:43 - Other Attack Vectors and Strategies
3:06:27 - Post Compromise Enumeration Intro
3:08:29 - PowerView Overview
3:10:41 - Domain Enumeration with PowerView
3:26:00 - Bloodhound Overview
3:29:33 - Grabbing Data with Invoke Bloodhound
3:32:43 - Using Bloodhound to Review Domain Data
3:40:19 - Post-Compromise Attacks Intro
3:41:21 - Pass the Hash and Password Overview
3:44:25 - Installing crackmapexec
3:45:04 - Pass the Password Attacks
3:52:11 - Dumping Hashes with secretsdump
3:55:22 - Cracking NTLM Hashes with Hashcat
3:58:29 - Pass the Hash Attacks
4:04:54 - Pass Attack Mitigations
4:07:36 - Token Impersonation Overview
4:11:25 - Token Impersonation with Incognito
4:18:28 - Token Impersonation Mitigation
4:21:11 - Kerberoasting Overview
4:26:22 - Kerberoasting Walkthrough
4:30:14 - Kerberoasting Defenses
4:31:23 - GPP Password Attacks Overview
4:34:48 - Abusing GPP Part 1
4:43:34 - Abusing GPP Part 2
4:47:45 - URL File Attacks
4:53:22 - Mimikatz Overview
4:58:57 - Credential Dumping with Mimikatz
5:08:19 - Golden Ticket Attacks
0:10:02 - Importance of Web App Security
0:16:26 - Web App Security Standards and Best Practices
0:29:57 - Bug Bounty Hunting vs Penetration Testing
0:40:16 - Phases of a Web App Pentest
0:57:36 - CryptoCat Introduction
0:59:19 - Understanding Scope, Ethics, Code of Conduct, etc.
1:13:29 - Common Scoping Mistakes
1:37:59 - Installing VMWare / VirtualBox
1:41:14 - Installing Linux
1:50:20 - Lab Installation
1:57:36 - Web Technologies
2:02:14 - HTTP & DNS
2:05:47 - Fingerprinting Web Technologies
2:18:00 - Directory Enumeration and Brute Forcing
2:38:07 - Subdomain Enumeration
2:55:43 - Burp Suite Overview
3:34:35 - Introduction to Authentication
3:36:11 - Brute-force Attacks
3:43:11 - Attacking MFA
3:48:38 - Authentication Challenge Walkthrough
3:58:38 - Intro to Authorization
3:59:48 - IDOR - Insecure Direct Object Reference
4:06:15 - Introduction to APIs
4:11:04 - Broken Access Control
4:19:33 - Testing with Autorize
4:27:02 - Introduction to LFI/RFI
4:28:39 - Local File Inclusion Attacks
4:32:59 - Remote File Inclusion Attacks
4:40:37 - File Inclusion Challenge Walkthrough
0:00 - Introduction/whoami 6:43 - A Day in the Life of an Ethical Hacker 27:44 - Effective Notekeeping 34:27 - Important Tools 39:51 - Networking Refresher: Introduction 41:06 - IP Addresses 54:18 - MAC Addresses 57:35 - TCP, UDP, & the Three-Way Handshake 1:02:51 - Common Ports & Protocols 1:09:04 - The OSI Model 1:14:39 - Subnetting, Part 1 1:41:42 - Subnetting, Part 2 1:46:01 - Installing VMWare / VirtualBox 1:52:19 - Installing Kali Linux 1:57:55 - Configuring VirtualBox 2:01:17 - Kali Linux Overview 2:04:48 - Sudo Overview 2:10:05 - Navigating the File System 2:28:22 - Users & Privileges 2:45:21 - Common Network Commands 2:53:51 - Viewing, Creating, & Editing Files 3:00:16 - Starting and Stopping Services 3:06:38 - Installing and Updating Tools 3:18:35 - Bash Scripting 3:41:14 - Intro to Python 3:43:37 - Strings 3:51:00 - Math 3:56:45 - Variables & Methods 4:07:05 - Functions 4:16:03 - Boolean Expressions and Relational Operators 4:24:37 - Conditional Statements 4:31:35 - Lists 4:43:48 - Tuples 4:45:59 - Looping 4:50:28 - Advanced Strings 5:03:08 - Dictionaries 5:09:32 - Importing Modules 5:15:30 - Sockets 5:23:11 - Building a Port Scanner 5:41:44 - User Input 5:50:22 - Reading and Writing Files 6:00:18 - Classes and Objects 6:08:10 - Building a Shoe Budget Tool 6:22:32 - The 5 Stages of Ethical Hacking 6:27:52 - Passive Recon Overview 6:35:29 - Identifying Our Target 6:39:06 - Discovering Email Addresses 6:54:59 - Breached Credentials Part 1 7:02:21 - Breached Credentials Part 2 7:14:18 - End Part 1
0:00 - Introduction 0:17 - Hunting Subdomains Part 1 5:54 - Hunting Subdomains Part 2 10:46 - Identifying Website Technologies 17:57 - Gathering Information w/ Burp Suite 26:49 - Google Fu 32:24 - Utilizing Social Media 38:05 - Installing Kioptrix 44:28 - Scanning w/ Nmap 1:04:16 - Enumerating HTTP/HTTPS Part 1 1:19:22 - Enumerating HTTP/HTTPS Part 2 1:34:35 - Enumerating SMB 1:48:59 - Enumerating SSH 1:53:11 - Researching Potential Vulnerabilities 2:08:05 - Our Notes So Far 2:11:15 - Scanning w/ Nessus Part 1 2:21:54 - Scanning w/ Nessus Part 2 2:28:07 - Reverse Shells vs Bind Shells 2:35:12 - Staged vs Non-Staged Payloads 2:38:37 - Gaining Root w/ Metasploit 2:46:21 - Manual Exploitation 2:59:06 - Brute Force Attacks 3:07:00 - Credential Stuffing & Password Spraying 3:21:07 - Our Notes, Revisited 3:24:56 - Downloading Our Materials 3:30:17 - Buffer Overflows Explained 3:34:29 - Spiking 3:44:46 - Fuzzing 3:50:59 - Finding the Offset 3:56:22 - Overwriting the EIP 3:59:51 - Finding Bad Characters 4:07:46 - Finding the Right Module 4:16:16 - Generating Shellcode and Gaining Root 4:22:16 - Python3 and More 4:36:01 - Capstone Introduction 4:41:47 - Setting up Blue 4:45:48 - Blue Walkthrough 5:02:53 - Academy Setup 5:05:22 - Academy Walkthrough 5:49:46 - Dev Walkthrough 6:15:10 - Butler Walkthrough 6:51:33 - Blackpearl Walkthrough 7:15:08 - Conclusion
0:00:00 - Intro 0:03:00 - Keeper Security Sponsorship 0:03:48 - Course Introduction 0:10:02 - Importance of Web App Security 0:16:26 - Web App Security Standards and Best Practices 0:29:57 - Bug Bounty Hunting vs Penetration Testing 0:40:16 - Phases of a Web App Pentest 0:57:36 - CryptoCat Introduction 0:59:19 - Understanding Scope, Ethics, Code of Conduct, etc. 1:13:29 - Common Scoping Mistakes 1:37:59 - Installing VMWare / VirtualBox 1:41:14 - Installing Linux 1:50:20 - Lab Installation 1:57:36 - Web Technologies 2:02:14 - HTTP & DNS 2:05:47 - Fingerprinting Web Technologies 2:18:00 - Directory Enumeration and Brute Forcing 2:38:07 - Subdomain Enumeration 2:55:43 - Burp Suite Overview 3:34:35 - Introduction to Authentication 3:36:11 - Brute-force Attacks 3:43:11 - Attacking MFA 3:48:38 - Authentication Challenge Walkthrough 3:58:38 - Intro to Authorization 3:59:48 - IDOR - Insecure Direct Object Reference 4:06:15 - Introduction to APIs 4:11:04 - Broken Access Control 4:19:33 - Testing with Autorize 4:27:02 - Introduction to LFI/RFI 4:28:39 - Local File Inclusion Attacks 4:32:59 - Remote File Inclusion Attacks 4:40:37 - File Inclusion Challenge Walkthrough 4:45:05 - Conclusion
0:00 - Introduction 04:02 - Installing VMWare / VirtualBox 10:17 - Installing Linux 15:50 - Configuring VirtualBox 19:06 - Installing PMK 21:44 - Active Directory Overview 26:58 - Physical Active Directory Components 32:45 - Logical Active Directory Components 40:12 - AD Lab Overview 43:13 - Cloud Lab Alternative 45:17 - Downloading the Necessary ISOs 48:06 - Setting up the Domain Controller 1:01:45 - Setting Up the User Machines 1:09:38 - Setting Up Users, Groups, and Policies 1:25:23 - Joining Our Machines to the Domain 1:34:11 - Initial AD Attacks Overview 1:38:07 - LLMNR Poisoning Overview 1:45:34 - Capturing NTLMv2 Hashes with Responder 1:50:20 - Password Cracking with Hashcat 2:01:52 - LLMNR Poisoning Defenses 2:04:41 - SMB Relay Attacks Overview 2:10:03 - Quick Lab Update 2:11:02 - Discovering Hosts with SMB Signing Disabled 2:14:40 - SMB Relay Attacks Part 1 2:19:34 - SMB Relay Attacks Part 2 2:23:40 - SMB Relay Attack Defenses 2:26:15 - Gaining Shell Access 2:34:02 - IPv6 Attacks Overview 2:38:03 - Installing mitm6 2:39:20 - Setting up LDAPS 2:41:43 - IPv6 DNS Attacks 2:49:27 - IPv6 Attack Defenses 2:52:27 - Passback Attacks 2:57:43 - Other Attack Vectors and Strategies 3:06:27 - Post Compromise Enumeration Intro 3:08:29 - PowerView Overview 3:10:41 - Domain Enumeration with PowerView 3:26:00 - Bloodhound Overview 3:29:33 - Grabbing Data with Invoke Bloodhound 3:32:43 - Using Bloodhound to Review Domain Data 3:40:19 - Post-Compromise Attacks Intro 3:41:21 - Pass the Hash and Password Overview 3:44:25 - Installing crackmapexec 3:45:04 - Pass the Password Attacks 3:52:11 - Dumping Hashes with secretsdump 3:55:22 - Cracking NTLM Hashes with Hashcat 3:58:29 - Pass the Hash Attacks 4:04:54 - Pass Attack Mitigations 4:07:36 - Token Impersonation Overview 4:11:25 - Token Impersonation with Incognito 4:18:28 - Token Impersonation Mitigation 4:21:11 - Kerberoasting Overview 4:26:22 - Kerberoasting Walkthrough 4:30:14 - Kerberoasting Defenses 4:31:23 - GPP Password Attacks Overview 4:34:48 - Abusing GPP Part 1 4:43:34 - Abusing GPP Part 2 4:47:45 - URL File Attacks 4:53:22 - Mimikatz Overview 4:58:57 - Credential Dumping with Mimikatz 5:08:19 - Golden Ticket Attacks 5:15:36 - Conclusion
0:00 - Overview 2:25 - Course Introduction 11:52 - Gaining a Foothold 23:15 - Initial Enumeration 49:50 - Exploring Automated Tools 1:12:28 - Kernel Exploits 1:30:32 - Passwords and Port Forwarding 1:59:28 - Windows Subsystem for Linux 2:25:26 - Impersonation Attacks 2:52:29 - getsystem 2:56:28 - RunAs 3:10:53 - Conclusion
0:00 - Overview 1:46 - Course Introduction 9:54 - Course Tips & Resources 15:50 - Gaining a Foothold: Intro and Shell Access 23:13 - System Enumeration 29:28 - User Enumeration 34:27 - Network Enumeration 38:43 - Password Enumeration 44:41 - Automated Tools Intro 49:28 - Exploring Automated Tools 1:01:16 - Kernel Exploits Overview 1:04:45 - Escalation via Kernel Exploits 1:10:55 - Passwords and File Permissions Overview 1:11:37 - Escalation via Stored Passwords 1:20:14 - Escalation via Weak File Permissions 1:30:58 - Escalation via SSH Keys 1:36:45 - Sudo Overview 1:38:07 - Escalation via Sudo Shell Escaping 1:44:54 - Escalation via Intended Functionality 1:49:41 - Escalation via LD_PRELOAD 1:56:50 - Challenge Overview 1:58:16 - Challenge Walkthrough 2:11:07 - CVE-2019-14287 Overview 2:14:30 - Escalation via CVE-2019-14287 2:17:12 - Overview and Escalation via CVE-2019-18634 2:24:02 - SUID Overview 2:32:31 - Gaining a Foothold 2:45:41 - Escalation via SUID 2:52:23 - Conclusion
0:00 - Introduction 1:23 - Downloading Our Materials 7:43 - Buffer Overflows Explained 11:56 - Spiking 22:12 - Fuzzing 28:26 - Finding the Offset 33:50 - Overwriting the EIP 37:19 - Finding Bad Characters 45:15 - Finding the Right Module 53:46 - Generating Shellcode & Gaining Root 59:46 - Python 3 & More 1:13:30 - TryHackMe Brainstorm Walkthrough
0:00 - Introduction/whoami 5:13 - Important Disclaimer 7:37 - OSINT Overview 12:06 - Taking Effective Notes 20:09 - Introduction to Sock Puppets 22:52 - Creating Sock Puppets 37:19 - Search Engine Operators 1:00:39 - Reverse Image Searching 1:07:58 - Viewing EXIF Data 1:14:27 - Physical Location OSINT 1:23:43 - Identifying Geographical Locations 1:34:16 - Where in the World, Part 1 1:35:34 - Where in the World, Part 2 1:46:58 - Creepy OSINT 1:47:49 - Discovering Email Addresses 2:03:42 - Password OSINT - Introduction 2:07:25 - Hunting Breached Passwords Part 1 2:19:25 - Hunting Breached Passwords Part 2 2:29:23 - Hunting Usernames & Accounts 2:38:07 - Searching for People 2:47:54 - Voter Records 2:51:46 - Hunting Phone Numbers 3:03:04 - Discovering Birthdates 3:06:42 - Searching for Resumes 3:11:51 - Twitter OSINT Part 1 3:26:46 - Twitter OSINT Part 2 3:41:57 - Twitter OSINT Part 3 3:47:22 - Facebook OSINT 4:00:33 - Instagram OSINT 4:09:07 - Snapchat OSINT 4:11:37 - Reddit OSINT 4:17:32 - LinkedIn OSINT 4:25:41 - TikTok OSINT 4:29:05 - Conclusion
0:00 - Introduction 1:15 - NordPass Sponsorship 2:10 - Course Overview 3:46 - The OWASP Top 10 14:11 - Installing OWASP Juice Shop 21:00 - Installing Foxy Proxy 23:14 - Exploring Burp Suite 34:42 - Introducing the Score Board 37:33 - SQL Injection Overview 42:45 - SQL Injection Walkthrough 52:52 - SQL Injection Defenses 55:41 - Broken Authentication Attacks and Defenses 1:01:25 - Testing for Broken Authentication 1:09:05 - Sensitive Data Exposure Attacks and Defenses 1:13:58 - Testing for Sensitive Data Exposure 1:22:00 - XML External Entities (XXE) Overview 1:31:54 - XXE Attacks and Defenses 1:39:58 - Broken Access Control Overview 1:43:27 - Broken Access Control Walkthrough 1:47:55 - Security Misconfigurations Overview 1:52:54 - Cross-Site Scripting (XSS) Overview 2:03:27 - Reflected XSS Walkthrough 2:09:50 - Stored XSS Walkthrough 2:16:07 - Preventing XSS 2:19:55 - Insecure Deserialization 2:24:28 - Using Components with Known Vulnerabilities 2:29:06 - Insufficient Logging and Monitoring 2:32:17 - Conclusion
0:00 - Introduction 0:52 - Episode 1 - Enumeration 1:26:51 - Episode 2 - Enumeration, XSS, and UI Bypassing 2:26:03 - Episode 3 - XSS, SQL Injection, and Broken Access Control 3:19:52 - Episode 4 - XXE, Input Validation, Broken Access Control, and More XSS 4:20:03 - Episode 5 - SQL Injections and Live Bug Bounty Hunting
As the Admin of our platform, I bring over a decade of experience in managing and leading digital transformation initiatives. My journey began in the tech industry as a developer, and I have since evolved into a strategic leader with a focus on innovation and operational excellence. I am passionate about leveraging technology to solve complex problems and drive organizational growth. Outside of work, I enjoy mentoring aspiring tech professionals and staying updated with the latest industry trends.
No Review found
Associate
Discover Additional Learning Opportunities
Static
