In this course, you will learn how to create secure web services.
333 learners
Hackers' attack vector
Understanding Security Areas
How to implement secure web features
How to handle safe input values
Various security threats
Want to create a secure web service?
Security Key Points for Web Developers!
Infrastructure security information DB transmission/storage/linkage access control
Upload the admin page framework file ...
This course examines key web security vulnerabilities frequently encountered, based on years of experience assessing real-world vulnerabilities. You'll learn how to mitigate these vulnerabilities, condensed into over 30 one-point lessons.
Today's information security is much more systematic than in the past, and many companies are investing in information security to ensure secure web services. Despite this, security vulnerabilities continue to cause breaches.
As web services continually add functionality, they inevitably face potential security threats. Furthermore, with new attack techniques constantly emerging, they are constantly exposed to threats, requiring ongoing security measures.
Security issues
I want to solve
web developer
today
Web service
The person who is running it
Web service
Plan to operate
Someone who is there
Occurring in practice
About web security vulnerabilities
Those who want to learn
While most existing hacking & security courses focus on attack techniques, this course focuses on defensive techniques. Therefore, it's ideal for anyone hoping to create a web service , already operating one , or working in web service development . If you're interested in learning web hacking techniques, please take one of Creative's other hacking courses!
Thankfully, I have received many positive reviews of the course.
I believe each and every lecture is the result of a lot of hard work! If you're hesitant about taking the course, trust me and take it!
Q. Is there any basic knowledge that will help me take the course?
Since this course is for those who create and operate web services, you must have basic knowledge of web and programming.
Q. If I run a web service or plan to run one, will this course be helpful?
This course will be very helpful. It's based on frequently encountered cases from real-world web environment assessments, allowing you to proactively mitigate various potential security threats.
Q. I am a security-related job seeker, aspirant, or a security practitioner. Can I take this course?
It doesn't matter. However, this course doesn't fit the purpose. This course focuses on security methodologies for secure web services. Those who need practical security knowledge should take other hacking-related courses from CriHackTive.
Q. I'm a web developer with general knowledge of web hacking and secure coding. Should I take this course?
This is even better. Even with a comprehensive understanding of web security, security vulnerabilities can arise from a variety of factors, including various attack vectors and mistakes or omissions made during actual development. I've seen many such cases during my on-the-job assessments. Through this lecture, you'll learn about various overlooked security vulnerabilities and proactively address them.
Who is this course right for?
Web Developer
Web Service Operator
Anyone planning to operate a web service
Web developers or operators who need web security knowledge
Need to know before starting?
Web Basics Knowledge
Basic knowledge of programming
25,761
Learners
1,345
Reviews
497
Answers
4.9
Rating
18
Courses
:: 국내 정보보안 솔루션 개발 기업 재직 ::
- 앱 위변조 방지 솔루션 : 미들웨어 담당 / 해킹 대회 운영진 / 국내 유명 해킹/방어 훈련장 제작
:: 국내 정보보안 전문 업체 재직 ::
- 블랙박스 모의해킹 / 시나리오 기반 모의해킹 / 웹 취약점 진단 / 모바일 취약점 진단 / 소스코드 취약점 진단 / APT 모의 훈련 / DDoS 모의훈련 / 인프라 진단 / 스마트 가전 진단
- 국내 대기업, 중소기업 다수 진단
:: 외부 교육 및 활동 ::
- 멀티캠퍼스, 국가 보안 기술 연구소(ETRI)
- 국내 정보보안 업체 : 재직자 대상 "웹 모의해킹 심화 교육" 진행중
- 해커팩토리 문제 제작
:: 취약점 발견 ::
1) Web Application Server 취약점
- TMAX JEUS : 원격 명령어 실행 취약점(Remote Command Execution Vulnerability)
- IBM WebSphere(CVE-2020-4163) : 원격 명령어 실행 취약점(Remote Command Execution Vulnerability)
2) CMS(Contents Management System) 취약점
- 네이버 스마트에디터 : 파일 업로드 취약점
- 그누보드 : SQL Injection , 파일 업로드 취약점(그누보드4, 그누보드5), XSS ...
- 킴스큐 : 파리미터 변조 취약점 , 파일 업로드 취약점
* 이메일 : crehacktive3@naver.com
* 블로그 : http://www.crehacktive.co.kr
All
38 lectures ∙ (5hr 25min)
Course Materials:
All
7 reviews
4.3
7 reviews
Reviews 1
∙
Average Rating 5.0
Reviews 1
∙
Average Rating 5.0
Reviews 10
∙
Average Rating 5.0
Reviews 1
∙
Average Rating 3.0
Reviews 17
∙
Average Rating 4.9
$26.40
Check out other courses by the instructor!
Explore other courses in the same field!
![Lỗ hổng tải tệp lên Kỹ thuật tấn công nâng cao PHẦN 2 [Phiên bản tích hợp]강의 썸네일](https://cdn.inflearn.com/public/courses/333012/cover/12bd40e1-1e17-493a-81b9-64ac5fed558e/333012.png?f=avif&w=420)
![[Khóa học toàn tập về phát triển web] Portfolio - Bán sản phẩm Phát triển ứng dụng web mini강의 썸네일](https://cdn.inflearn.com/public/courses/330081/cover/7afb92db-0588-4ac1-920f-38ab511054eb/fullstack-project-1.jpg?f=avif&w=420)
![[DevOps] Tạo quy trình triển khai ứng dụng nhanh chóng và an toàn (CI/CD)강의 썸네일](https://cdn.inflearn.com/public/courses/332182/cover/f1183942-1754-4cc9-bd8f-8180146e5a1d/332182.png?f=avif&w=420)
![Xây dựng web responsive chỉ với html/css/js thuần túy [Phần thực hành] Bootcamp강의 썸네일](https://cdn.inflearn.com/public/courses/333180/cover/26ede6df-032a-40f2-9670-f6748785eba5/333180.jpg?f=avif&w=420)
