Hack Yourself First: How to go on the Cyber-Offense
|
“Hack Yourself First” is all about developers building up cyber-offense skills and proactively seeking out security vulnerabilities in their own websites before an attacker does.
The prevalence of online attacks against websites has accelerated quickly in recent years and the same risks continue to be readily exploited. However, these are very often easily identified directly within the browser; it’s just a matter of understanding the vulnerable patterns to look for.
This course, Hack Yourself First: How to go on the Cyber-Offense, comes at security from the view of the attacker in that their entry point is typically the browser. They have a website they want to probe for security risks and this is how they go about it.
This approach is more reflective of the real online threat than reviewing source code is and it empowers developers to begin immediately assessing their applications even when they’re running in a live environment without access to the source. After all, that’s what online attackers are doing.
Author Name: Troy Hunt
Author Description:
Troy Hunt is a Microsoft Regional Director and MVP for Developer Security, an ASPInsider, and a full time Author for Pluralsight—a leader in online training for technology and creative professionals. Troy has been building software for browsers since the very early days of the web and possesses an exceptional ability to distill complex subjects into relatable explanations. This has led Troy to become an industry thought leader in the security space and produce more than twenty top-rated courses … more
Table of Contents
- Introduction
25mins - Transport Layer Protection
68mins - Cross Site Scripting (XSS)
57mins - Cookies
45mins - Internal Implementation Disclosure
69mins - Parameter Tampering
91mins - SQL Injection
76mins - Cross Site Attacks
60mins - Account Management
70mins
User Reviews
Be the first to review “Hack Yourself First: How to go on the Cyber-Offense”
Related Products
Exploitation with PowerShell
Learning about PowerShell exploitation techniques and tools is of vital importance for successfully running red team operations or penetration tests in Windows environments.
Pen Testing with Bash
Perfecting Bash is essential for pen testers since it is one of the greatest tools out there. This course will teach you how to utilize Bash and Bash scripting in penetration testing.
Sniffing and Spoofing with Kali Linux
Having access to an internal network can provide a wealth of information, if you know how to look for it. This course will teach you Sniffing and Spoofing techniques using Ettercap and TCPDump.
Application Analysis with Snyk
Developer-centric security is the need of the hour. In this course, you will learn how to automatically detect and fix vulnerabilities in your code, open source dependencies, containers, and infrastructure-as-code with Snyk.
Ghidra Concepts and Basic Functionality
At the core of every reverse engineers toolkit is a tool that disassembles or decompiles machine code. This course will teach you everything you need to know to get started with Ghidra, a free and open source suite of reverse engineering tools.
Network Pen Testing with Python
A thorough assessment of an environment requires simulating a high volume of offensive techniques within a fixed time frame. This course will teach you how to automate penetration testing with Python.
There are no reviews yet.