1.INTRODUCTION
2.LET'S GET STARTED
3.TOOLS
-
1.Vega (6:05)
-
2.Nikto (5:13)
-
3.Sub Domain (5:39)
-
4.Recon ng (9:14)
-
5.Knockpy (2:49)
-
6.Nmap (5:44)
-
7.NMAP Banner script (2:17)
-
8.NMAP http-enum script (2:03)
-
9.NMAP http-header (1:45)
-
10.Hacking Website Through Open Ports (4:49)
-
11.Open port Hackerone reports (1:27)
-
12.LFIsuite installation (1:35)
-
13.Exploitation of LFI (2:01)
-
14.Burp Suite (4:35)
-
15.Burpsuite Crawling (2:13)
-
16.Scanner (6:52)
-
17.Intruder (6:08)
-
18.Repeater (3:44)
-
19.Sequencer (4:14)
-
20.Analyzing Sequencer Data (3:59)
-
21.Decoder (1:52)
-
22.Comparer (1:57)
-
23.Save and Restore (3:31)
-
24.Authorization (4:14)
-
25.BWap (5:22)
-
26.wapplayzer (4:53)
-
27.Firebug (2:55)
-
28.Hack bar (3:30)
-
29.User agent Switcher (2:27)
-
30.Sublist3r (3:31)
-
31.Hydra - Online password attacks - Kali Linux (2:35)
-
32.bruteforce password vulnerability (1:43)
4.WORDPRESS HACKING
5.CROSS-SITE SCRIPTING (XSS)
-
1.XSS Demo (2:39)
-
2.Manual building xss vector 1 (3:00)
-
3.Manual building xss vector 2 (2:34)
-
4.Manual building xss vector 3 (2:32)
-
5. Exploitation of XSS Phishing Through XSS (2:16)
-
6.XSS Through Filter Bypassed XSS payloads on Lab (3:21)
-
7.XSS Lenovo Yahoo (1:30)
-
8.XSS Uber (2:38)
-
9.XSS Paypal (1:38)
-
10.XSS WhatsApp Facebook (1:45)
-
11.Counter Measures for XSS (2:21)
6.SQL INJECTION (SQLI)
7.CLICKJACKING
8.OPEN REDIRECT VULNERABILITY
9.CROSS-SITE REQUEST FORGERY (CSRF)
10.FULL PATH DISCLOSURE
11.BROKEN AUTHENTICATION AND SESSION MANAGEMENT
-
1.Authorization (4:14)
-
2.Broken Auth - Insecure Login Forms demo (1:32)
-
3.Broken authentication logout management (1:21)
-
4.Privilege (1:46)
-
5.Privilege bookfresh (1:26)
-
6.Testing for privilege (1:50)
-
7.Session Mgmt - Administrative Portals (0:41)
-
8.session report (2:51)
-
9.Application Logic Report (1:56)
-
10.Application Logic similar Report (1:20)
12.HTML INJECTION
13.SUB DOMAIN TAKE OVER
14.REMOTE CODE EXECUTION
-
1.Remote Code Execution (1:51)
-
2. Remote Code Execution similar Reports (0:57)
-
3.Cookies (3:27)
-
4.crt.sh (1:25)
-
5.Sensitive Data Exposure (2:12)
-
6.Buffer Overflow (3:33)
-
7.Buffer Overflow Similar Report (1:22)
-
8.IDOR (1:35)
-
9.IDOR Similar Report (1:08)
-
10.DNS misconfiguration (2:29)
-
11.DNS Misconfiguration Similar Reports (1:21)
15.DENAIL OF SERVICE (DOS)
16.MISCELLANEOUS
-
1.DVWA Security Setup (1:34)
-
2.Command Injection On Lab (4:38)
-
3.Detecting and Exploiting File Upload Vulnerabilities_Z_ (3:42)
-
4.Using ZAP to Scan Target Website For Vulnerabilities (2:46)
-
5.Analysing Scan Result (2:04)
-
6.SPF Record Validation (2:42)
-
7.Code Disclosure on Lab (4:12)
-
8.where you can find vulnerabilities (3:25)
-
9.Information Disclosure - Robots File (3:07)
-
10.Unrestricted File Upload (3:04)
17.METHODOLOGY
