It was easy to understand through the owasp practice, and it was not just a simple attack practice, but it explained the status of the server after the attack, the form of the server source code, and the subsequent response plan, so I was able to understand it more deeply than just looking at the theory. Thank you.

kwonjg

From beginners to practitioners who are curious about mock hacking work and web application vulnerabilities, it can be viewed. The following contents are covered: Bee-box is a virtual environment where bWAPP (buggy Web Application), an open source web application that can attack web vulnerabilities, is installed, and it includes the latest system attack techniques and the difficulty level is adjusted for each item.

boanproject

Complete web mock hacking practice using Vibox

입문

초급

중급이상

Penetration Testing

Orientation

Part1 A1 - Injection

Part 2 A2 - Authentication Defects and Session Management

Part 3 A3 - Cross-site scripting

Part 4 A4 - Vulnerable Direct Object References

Part 5 A5 - Security Settings Error

Part 6 A6 - Sensitive Data Exposure

Part 7 A7 - Missing Function-Level Access Control

Part 8 A8 - Cross-site request forgery

Part 9 A9 - Using Components with Known Vulnerabilities

Part 10 A10 - Unverified Redirects and Forwards

File Upload Vulnerability - System Penetration

Supplementary Lesson - Using Buff Suite (Version 1.7x)