Web Security Engineer Training
Web Security Engineer Training Academy: a systematic Knowledge system + Combat training to help you become the next Web security engineer, white hat or hacker.
: http://www.zygx8.com/thread-6125-1-1.html
01WEB Basic Knowledge
Content type: Video document with quiz Rich Text discussion
Course Classification: Information security and encryption Web security technology development
This lesson is the basis of the basic, easy to understand the nature of the web and the basic knowledge of web development. For the Web small white, it is recommended to learn from the beginning; For those who already have a certain basic knowledge of the web, it is recommended to quickly over and tamp the foundation.
Pre-knowledge
Have a certain computer operation basis, be able to download and use all kinds of software, skilled use of the browser.
Lesson Outline
Chapter One introduction to the Web
The first section. Web Introduction
The second section. Web Communication
Chapter II Basic knowledge of web development
Section I. Front-end Development Basics--html
Section II. Front-end Development Foundation--javascript
The third section. Web server-side environment
Section fourth. Backend Development Foundation--sql
Section fifth. Backend Development Foundation--php
02WEB Security Basics
Content type: Video document with quiz Rich Text discussion
Course Classification: Information security and encryption Web security technology development
Lofty high-rise floor, building can cover how tall, mainly to see the foundation dozen good. Learning any knowledge is the same, playing a good foundation is the key, through this lesson, you will learn some common web vulnerabilities, as well as the principle and harm of these vulnerabilities, lay a good foundation for the rear building of high-rise buildings ready.
Pre-knowledge
Learn about the basics of the web and familiarize yourself with HTML, CSS, JS, SQL syntax, and PHP syntax and common functions.
Lesson Outline
Chapter I. Ubiquitous security issues
The first section. Common Security Events
Chapter Two: Common Web vulnerability Resolution
The first section. Xss
The second section. Csrf
Section III. Click Hijack
Fourth section. URL Jump
Fifth section. SQL injection
Sixth section. Command injection
Section seventh. File Operation Vulnerability
03WEB Security Tools
Content type: Video document with quiz Rich Text discussion
Course Classification: Information security and encryption Web security technology development
In web security testing, with the help of the right tools, we can improve our testing efficiency and expand our testing ideas.
This lesson will introduce browser and extension, Agent grab packet, sensitive file detection, vulnerability scanning, injection detection, target information collection of common tools usage and test ideas.
Pre-knowledge
1) often use the computer in daily life, can download and install a variety of software, such as NetEase cloud music, Chrome browser, etc.;
2) Understand Web Foundation and web workflow;
3) familiar with common web security vulnerabilities.
Lesson Outline
Chapter One. browser and browser extension beginner
The first section. Getting Started with security Test browser
Section II. Getting Started with browser extensions for security testing
Chapter II. Agent Grab Packet Analysis tool
The first section. Introduction to Proxy Tools
The second section. Agent Tools Practical Foundation
Chapter Three. Web Vulnerability Scanning Tool beginner
Section I. Getting started with sensitive file probing
Section II. Getting Started with vulnerability scanning tools
The third section. Getting started with SQL Injection vulnerability testing
Fourth chapter: Online Tools
The first section. Online tools
04WEB Safe Combat
Content type: Video document with quiz Rich Text discussion
Course Classification: Information security and encryption Web security technology development
The paper came to the end of the light, I know this matter to preach.
Through the course of learning and practical exercises, let the students understand and grasp the common web security vulnerabilities mining, use skills, and know how to repair.
Pre-knowledge
1) Knowledge of common Web foundation and web security vulnerabilities;
2) deep understanding of common web security vulnerabilities;
3) Be familiar with the use of related web security tools.
Lesson Outline
The first section. DVWA deployment
Section Ii. Violent cracking
Section III. Command injection
Fourth section. Csrf
Fifth section. file contains
Sixth section. File Upload
Seventh section. SQL Echo Injection
Eighth section. SQL Blinds
Nineth section. Xss
05WEB Security System Construction
Content type: Video document with quiz Rich Text discussion
Course Classification: Information security and encryption Web security technology development
Unknown attack, how to know how to prevent?
Through the previous courses we have mastered various attack skills, this lesson will teach you how to build safety in enterprises, to achieve the realm of knowledge and understanding, which is the ultimate need of each company security personnel.
Pre-knowledge
Familiar with the principle of the loopholes, mining and repair solutions.
Lesson Outline
The first section. About SDL
Section II. Vulnerability and Event handling
Section III. Security Operations overview
Web Security Engineer Training
