강의

N
챌린지

멘토링

로드맵

BEST
Security & Network

/

Computer Security

Analysis of File Upload Vulnerability Attack Techniques and Practical Cases by a Simulated Hacking Practitioner: PART 1

The ultimate web hacking master! File upload vulnerability attack technique! This is a training that will further improve the students' web hacking skills through a completely different approach from the existing known methods!

(4.9) 67 reviews

804 learners

  • crehacktive
Penetration Testing

Reviews from Early Learners

What you will learn!

  • How the file upload function works

  • File upload vulnerability principle

  • Understanding web shells and how they work

  • File upload vulnerability attack methodology

  • File Upload Vulnerability Secure Coding Techniques

  • Practical attack techniques

📖 A series of file upload vulnerability attacks, explained by a simulated hacking expert!

  • PART (1): Basics / Practical Attacks / Secure Coding ◀ Current Course
    This training covers the most crucial aspect of file upload vulnerability attacks, detailing the attack process with a completely different approach from previously known methods. You'll learn the fundamentals of attack, practical bypass techniques, case studies, various countermeasures, and secure coding. This essential training serves as the foundation for subsequent courses.
  • PART (2): Advanced Attack Techniques / In-Depth Practical Analysis
    This training covers advanced attack techniques and Web Application Firewall bypass techniques not covered in PART (1), and analyzes technical techniques used in practical environments through hands-on practice.
  • SKILL-UP: Webshell Obfuscation Techniques
    In today's web environment, the use of web shell detection solutions is increasing, and accordingly, analysts must possess the skills to bypass them. Therefore, this training will be essential for practitioners.

📖 File upload vulnerability?! What the heck is this!?

File upload vulnerabilities are an attack technique that utilizes a malicious script called a WebShell to take control of a server. The attack doesn't stop at a single server, but can extend into the internal network . This is truly a devastating attack!

📖 Why should you learn about file upload vulnerability attacks?

File upload functionality is essential in today's web environment. Most of the websites we frequently use have file upload functionality! What if a web shell, a malicious script for attack, were uploaded through this feature?

Numerous malicious hackers (black hackers) use this attack technique to penetrate internally via compromised web servers, deploying malware to employees, distributing ransomware, stealing confidential internal information, and stealing personal customer information. This is a truly terrifying attack!

Because of this influence, many companies cannot help but be sensitive to " file upload vulnerabilities ," and it is an attack technique that has even earned the title of " the ultimate boss " among practitioners!

If you are doing web hacking yourself or defending yourself, you now know what you need to know, right? ㅡ.,ㅡ;;

📖 Why should I take this course?

Those of you reading this right now likely fall into the following categories:

  • Beginners who are just starting out with web hacking
  • Beginner/intermediate level students who have just started studying web hacking.
  • A job seeker who graduated from a security academy
  • A diagnostician (consultant) who is making a diagnosis in practice

I would like to say it in one sentence.

" It helps everyone. "

This is the most persistent attack that digs into the field during diagnosis, and it is my personal favorite.
I would like to share with you the know-how I have gained over the years.

📖 Through detailed attack principle analysis
Education that even beginners can easily access!

The training will be conducted from the basics, including the operating principles of the file upload function and the principles of file upload vulnerabilities.
We will go through each step in detail so that even beginners can easily understand.

📖 From the principle of web shell operation
Practice creating your own web shell!

We'll cover the basic concepts, operating principles, and hands-on practice of creating a "web shell," a key element in file upload vulnerability attacks. Understanding web shells is essential!

📖 SKILL-UP through practical case studies~!!!

Expand your practical perspective with 12 case studies, and make the skills your own by practicing in the provided virtual environment!

📖 Provides a virtual practice environment for hands-on training!

A total of 18 virtual practice environments are provided for JSP and PHP!

📖 Learn secure coding by following along!
Secure coding technology is also improving!

We often see diagnosticians being strong on offense but weak on defense. This stems from language barriers and a lack of understanding of secure coding. Practice can help you overcome these barriers!

📖 Expected effects through education

  • A conceptual shift in file upload vulnerabilities
  • Correct Attack Guidelines
  • Improve your skills through a new perspective
  • Learn not only offensive skills but also defensive skills!

🛠 Programs covered here

  • Burp Suite
  • APMSetup
  • Tomcat

※ How to use Burp Suite is not covered in this training. You can refer to the basic usage method in the training "Stories about Web Hacking and Simulated Hacking in the Field."

💡 Must-see lectures

Web Technology Fundamentals You Must Know
A course to learn the basics of web technology
A story about web hacking and simulated hacking in the field.
Beginner's Guide to Learning Web Hacking

※ This training PPT uses Nanum font provided by Naver.

Recommended for
these people

Who is this course right for?

  • For everyone from beginners to advanced web hackers.

  • hands-on worker

  • For those who want to know more about file upload vulnerability attack techniques

Need to know before starting?

  • Web Basics

  • Web Hacking Basics

Hello
This is

26,082

Learners

1,381

Reviews

501

Answers

4.9

Rating

18

Courses

안녕하세요, 크리핵티브입니다.

다년간 다양한 웹 서비스를 진단하고 연구한 경험을 바탕으로, 실무에 바로 적용 가능한 지식을 인프런 플랫폼에서 공유해오고 있습니다.

그리고 웹 해킹 기초를 체계적으로 다룬 『크리핵티브의 한 권으로 끝내는 웹 해킹 바이블』을 집필했습니다. 기초가 부족한 분들께는 이 책으로 학습을 시작하실 것을 권합니다.

 

Curriculum

All

111 lectures ∙ (15hr 39min)

Course Materials:

Lecture resources
Published: 
Last updated: 

Reviews

All

67 reviews

4.9

67 reviews

  • onejsh22504님의 프로필 이미지
    onejsh22504

    Reviews 1

    ∙

    Average Rating 5.0

    5

    91% enrolled

    This seems to be the best lecture in the field of mock hacking. Since uploading is the key attack, I'm really looking forward to Part 2. When will I be able to see it??.....

    • crehacktive
      Instructor

      There were a lot of lectures to be made ahead of time, so I had no choice but to delay the schedule. I will make sure to complete it in the second half of the year.

  • news8376님의 프로필 이미지
    news8376

    Reviews 4

    ∙

    Average Rating 5.0

    5

    100% enrolled

    These were really helpful classes. Thank you.

    • crehacktive
      Instructor

      I'm so glad it was helpful! Thank you so much for the great review.^^

  • jm04401162님의 프로필 이미지
    jm04401162

    Reviews 2

    ∙

    Average Rating 5.0

    5

    100% enrolled

    great.

    • crehacktive
      Instructor

      5-star course review! Thank you so much! Have a nice day~!

  • whtjdals1106님의 프로필 이미지
    whtjdals1106

    Reviews 2

    ∙

    Average Rating 5.0

    5

    98% enrolled

    I love it so much

    • crehacktive
      Instructor

      Thank you so much for the great review! Have a nice day~!

  • hwangjh2332님의 프로필 이미지
    hwangjh2332

    Reviews 8

    ∙

    Average Rating 4.9

    5

    31% enrolled

    The content of the education is substantial.

    Limited time deal

    $51.70

    24%

    $68.20

    crehacktive's other courses

    Check out other courses by the instructor!

    Web Hacking & Secure Coding That Web Developers and Information Security Beginners Must Know강의 썸네일

    Web Hacking & Secure Coding That Web Developers and Information Security Beginners Must Know

    crehacktive

    An introductory course on web hacking for information security beginners and web developers! Start web hacking in a fun way with this course!

    초급

    초급

    Penetration Testing, Injection

    Web Hacking & Secure Coding That Web Developers and Information Security Beginners Must Know강의 썸네일

    Web Hacking & Secure Coding That Web Developers and Information Security Beginners Must Know

    crehacktive

    XSS attack techniques explained by a mock hacking practitioner강의 썸네일

    XSS attack techniques explained by a mock hacking practitioner

    crehacktive

    This lecture covers the king of client attacks, XSS (Cross-Site Scripting). You can systematically learn about the basic concepts of XSS, the attack principles, and most importantly, what process to go through to perform the attack procedure.

    초급

    초급

    Penetration Testing, xss

    XSS attack techniques explained by a mock hacking practitioner강의 썸네일

    XSS attack techniques explained by a mock hacking practitioner

    crehacktive

    Analysis of File Download Vulnerability Attack Techniques and Practical Cases by a Simulated Hacking Practitioner강의 썸네일

    Analysis of File Download Vulnerability Attack Techniques and Practical Cases by a Simulated Hacking Practitioner

    crehacktive

    Easy-to-follow file download vulnerability attack techniques from web hacking beginners to practitioners! File download vulnerability attack techniques and advanced attack techniques used in practice! And how to apply secure coding!

    초급

    초급

    Penetration Testing

    Analysis of File Download Vulnerability Attack Techniques and Practical Cases by a Simulated Hacking Practitioner강의 썸네일

    Analysis of File Download Vulnerability Attack Techniques and Practical Cases by a Simulated Hacking Practitioner

    crehacktive

    SQL Injection Attack Techniques and Secure Coding Explained by a Simulated Hacking Practitioner: PART 1강의 썸네일

    SQL Injection Attack Techniques and Secure Coding Explained by a Simulated Hacking Practitioner: PART 1

    crehacktive

    SQL Injection, the flower of web hacking, explained by a mock hacking practitioner! Learn attack and defense at the same time.

    초급

    초급

    Penetration Testing, Injection

    SQL Injection Attack Techniques and Secure Coding Explained by a Simulated Hacking Practitioner: PART 1강의 썸네일

    SQL Injection Attack Techniques and Secure Coding Explained by a Simulated Hacking Practitioner: PART 1

    crehacktive

    Advanced SQL Injection Attack Techniques Explained by a Simulated Hacking Practitioner: PART 2강의 썸네일

    Advanced SQL Injection Attack Techniques Explained by a Simulated Hacking Practitioner: PART 2

    crehacktive

    The second lecture on SQL Injection, taught by a mock hacking practitioner! The first lecture covered the basics and the core principles of attacks, while the second lecture is about technical advanced attack techniques. Therefore, taking the first lecture is a must!

    중급이상

    중급이상

    Penetration Testing, Injection

    Advanced SQL Injection Attack Techniques Explained by a Simulated Hacking Practitioner: PART 2강의 썸네일

    Advanced SQL Injection Attack Techniques Explained by a Simulated Hacking Practitioner: PART 2

    crehacktive

    File Upload Vulnerability Advanced Attack Techniques PART2-3: Attack Methodologies in Various Practical Environments강의 썸네일

    File Upload Vulnerability Advanced Attack Techniques PART2-3: Attack Methodologies in Various Practical Environments

    crehacktive

    The ultimate web hacking! File upload vulnerability attack technique! Following Part 1, Part 2 '3rd part' education covers more advanced techniques in depth.

    중급이상

    중급이상

    Penetration Testing

    File Upload Vulnerability Advanced Attack Techniques PART2-3: Attack Methodologies in Various Practical Environments강의 썸네일

    File Upload Vulnerability Advanced Attack Techniques PART2-3: Attack Methodologies in Various Practical Environments

    crehacktive

    File Upload Vulnerability Advanced Attack Techniques PART2-1: File Upload Library Analysis and Attack Methodology강의 썸네일

    File Upload Vulnerability Advanced Attack Techniques PART2-1: File Upload Library Analysis and Attack Methodology

    crehacktive

    The ultimate web hacking! File upload vulnerability attack technique! Part 2 of the 'Part 1' education follows Part 1 and covers more advanced techniques.

    중급이상

    중급이상

    Penetration Testing

    File Upload Vulnerability Advanced Attack Techniques PART2-1: File Upload Library Analysis and Attack Methodology강의 썸네일

    File Upload Vulnerability Advanced Attack Techniques PART2-1: File Upload Library Analysis and Attack Methodology

    crehacktive

    File Upload Vulnerability Advanced Attack Techniques PART2-2: Basic Knowledge and Techniques for Bypassing Web Firewalls강의 썸네일

    File Upload Vulnerability Advanced Attack Techniques PART2-2: Basic Knowledge and Techniques for Bypassing Web Firewalls

    crehacktive

    The ultimate web hacking! File upload vulnerability attack technique! Part 2 of the '2nd part' education follows Part 1 and covers more advanced techniques.

    중급이상

    중급이상

    Penetration Testing

    File Upload Vulnerability Advanced Attack Techniques PART2-2: Basic Knowledge and Techniques for Bypassing Web Firewalls강의 썸네일

    File Upload Vulnerability Advanced Attack Techniques PART2-2: Basic Knowledge and Techniques for Bypassing Web Firewalls

    crehacktive

    Skill-Up! Webshell Obfuscation Techniques for Bypassing Webshell Detection Solutions강의 썸네일

    Skill-Up! Webshell Obfuscation Techniques for Bypassing Webshell Detection Solutions

    crehacktive

    Basic understanding of web shells and web shell detection solutions, as well as attack methods and obfuscation techniques for bypassing them!

    초급

    초급

    Penetration Testing, Web Shell

    Skill-Up! Webshell Obfuscation Techniques for Bypassing Webshell Detection Solutions강의 썸네일

    Skill-Up! Webshell Obfuscation Techniques for Bypassing Webshell Detection Solutions

    crehacktive

    Web technology basics you must know강의 썸네일

    Web technology basics you must know

    crehacktive

    This is a course where you can learn the basics of web technology. You can learn the basics of web technology in a short period of time. If you are interested in studying or getting a job related to the web, you must take this course!

    입문

    입문

    Penetration Testing

    Web technology basics you must know강의 썸네일

    Web technology basics you must know

    crehacktive

    Skill-Up! Create a web shell that you can learn and use right away강의 썸네일

    Skill-Up! Create a web shell that you can learn and use right away

    crehacktive

    Web shell is the core tool for file upload vulnerability attacks! Let's learn how to create a web shell together through this lecture~!

    초급

    초급

    Web Shell, Bootstrap

    Skill-Up! Create a web shell that you can learn and use right away강의 썸네일

    Skill-Up! Create a web shell that you can learn and use right away

    crehacktive

    Basic SQL Grammar for Successful SQL Injection Attacks강의 썸네일

    Basic SQL Grammar for Successful SQL Injection Attacks

    crehacktive

    The basic steps to learn SQL injection attacks, the flower of web hacking! This is a lecture on basic SQL grammar!

    초급

    초급

    SQL, Penetration Testing, MySQL

    Basic SQL Grammar for Successful SQL Injection Attacks강의 썸네일

    Basic SQL Grammar for Successful SQL Injection Attacks

    crehacktive

    File Upload Vulnerability Advanced Attack Techniques PART2 [Integrated Edition]강의 썸네일

    File Upload Vulnerability Advanced Attack Techniques PART2 [Integrated Edition]

    crehacktive

    The ultimate web hacking! File upload vulnerability attack technique! Part 2 of the 'Part 1' education follows Part 1 and covers more advanced techniques.

    중급이상

    중급이상

    Penetration Testing, Java, Web Shell

    File Upload Vulnerability Advanced Attack Techniques PART2 [Integrated Edition]강의 썸네일

    File Upload Vulnerability Advanced Attack Techniques PART2 [Integrated Edition]

    crehacktive

    One-point lesson on web security for creating a secure website강의 썸네일

    One-point lesson on web security for creating a secure website

    crehacktive

    In this course, you will learn how to create secure web services.

    초급

    초급

    One-point lesson on web security for creating a secure website강의 썸네일

    One-point lesson on web security for creating a secure website

    crehacktive

    OAuth 2.0 Concepts and Principles Learned Through Practice, Hacking, and Security강의 썸네일

    OAuth 2.0 Concepts and Principles Learned Through Practice, Hacking, and Security

    crehacktive

    We will take a closer look at the working principles through core theories and practices of the OAuth 2.0 protocol. And we will analyze the OAuth 2.0 protocol from the perspective of hacking and security.

    중급이상

    중급이상

    Penetration Testing, OAuth

    OAuth 2.0 Concepts and Principles Learned Through Practice, Hacking, and Security강의 썸네일

    OAuth 2.0 Concepts and Principles Learned Through Practice, Hacking, and Security

    crehacktive

    Web hacking that teaches you the principles by following along: WebGoat강의 썸네일

    Web hacking that teaches you the principles by following along: WebGoat

    crehacktive

    A web hacking course where you can learn, practice, and understand the principles by simply following along with WebGoat problem solving!

    초급

    초급

    Penetration Testing, WebGoat

    Web hacking that teaches you the principles by following along: WebGoat강의 썸네일

    Web hacking that teaches you the principles by following along: WebGoat

    crehacktive

    Talk about web hacking and mock hacking in the field강의 썸네일

    Talk about web hacking and mock hacking in the field

    crehacktive

    Introduction to web hacking and mock hacking for those who are new to web hacking and job seekers in related fields

    입문

    입문

    Penetration Testing

    Talk about web hacking and mock hacking in the field강의 썸네일

    Talk about web hacking and mock hacking in the field

    crehacktive

    Similar courses

    Explore other courses in the same field!

    Analysis of File Download Vulnerability Attack Techniques and Practical Cases by a Simulated Hacking Practitioner강의 썸네일

    Analysis of File Download Vulnerability Attack Techniques and Practical Cases by a Simulated Hacking Practitioner

    crehacktive

    Easy-to-follow file download vulnerability attack techniques from web hacking beginners to practitioners! File download vulnerability attack techniques and advanced attack techniques used in practice! And how to apply secure coding!

    초급

    초급

    Penetration Testing

    Analysis of File Download Vulnerability Attack Techniques and Practical Cases by a Simulated Hacking Practitioner강의 썸네일

    Analysis of File Download Vulnerability Attack Techniques and Practical Cases by a Simulated Hacking Practitioner

    crehacktive

    XSS attack techniques explained by a mock hacking practitioner강의 썸네일

    XSS attack techniques explained by a mock hacking practitioner

    crehacktive

    This lecture covers the king of client attacks, XSS (Cross-Site Scripting). You can systematically learn about the basic concepts of XSS, the attack principles, and most importantly, what process to go through to perform the attack procedure.

    초급

    초급

    Penetration Testing, xss

    XSS attack techniques explained by a mock hacking practitioner강의 썸네일

    XSS attack techniques explained by a mock hacking practitioner

    crehacktive

    Understanding AWS Cloud Service Infrastructure Construction, Hacking, and Security강의 썸네일

    Understanding AWS Cloud Service Infrastructure Construction, Hacking, and Security

    boanproject

    IT services are rapidly transitioning to cloud environments. You will learn security practices from basic virtual infrastructure construction to security threat monitoring and vulnerability diagnosis for each area to secure the Amazon AWS cloud environment.

    초급

    초급

    AWS, Penetration Testing

    Understanding AWS Cloud Service Infrastructure Construction, Hacking, and Security강의 썸네일

    Understanding AWS Cloud Service Infrastructure Construction, Hacking, and Security

    boanproject

    Mock Hacking Job Preparation, Interview Preparation Course강의 썸네일

    Mock Hacking Job Preparation, Interview Preparation Course

    boanproject

    This lecture provides a general guide on how to prepare while studying when you want to choose a career in IT security penetration testing, and what questions and answers to prepare for the interview. I will share my experience working as a penetration testing consultant, at large companies, and in the financial sector, and currently running a penetration testing consulting business.

    입문

    입문

    Penetration Testing, Tech Interview

    Mock Hacking Job Preparation, Interview Preparation Course강의 썸네일

    Mock Hacking Job Preparation, Interview Preparation Course

    boanproject

    Web technology basics you must know강의 썸네일

    Web technology basics you must know

    crehacktive

    This is a course where you can learn the basics of web technology. You can learn the basics of web technology in a short period of time. If you are interested in studying or getting a job related to the web, you must take this course!

    입문

    입문

    Penetration Testing

    Web technology basics you must know강의 썸네일

    Web technology basics you must know

    crehacktive