✅ Web Hacking Techniques (Basic + Applied)
A course on hacking the web using various tools used for web hacking.
Hacking targets web servers, web applications, and web users through three interrelated attack vectors. Each attack vector is as follows:
1. Web server: An application that hosts web applications and runs on top of an operating system.
- Rather than traditional computer hardware, it refers to a service that opens ports and operates to communicate with users' Internet browsers. Web servers can be vulnerable to attacks that attempt to hack the network and access their file structure or system files without authorization.
2. Web application: A program that actually runs on a web server to interact with web users.
- Web applications are a favorite target for web hackers. They are subject to a wide range of attacks aimed at performing unauthorized actions.
3. Web users: It is worth attacking both internal users who manage the web application (such as administrators or programmers) and external users of the web application (such as human clients or customers).
- This is also where XSS and CSRF vulnerabilities rear their heads in web applications. This includes technical and social engineering hacking aimed at web users, rather than relying on existing web application vulnerabilities.
Each target has its own unique attack method for finding vulnerabilities, exploiting them, and leaving payloads behind, requiring unique tools and techniques for each target.
Q. Can non-majors follow along?
Yes, of course you can. However, there are some prerequisite knowledge required for learning, so be sure to check the [Prerequisite Knowledge] section below!