BEST

Web Hacking from Beginner to Intermediate: Learn It All at Once

Name: Web Hacking from Beginner to Intermediate: Learn It All at Once
Price: 165000 KRW
Rating: 4.9 (49 reviews)

Web hacking is okay, even if it's your first time. From basics to practical skills, an introductory web security course where you learn like a hacker.

(4.9) 49 reviews

333 learners

Level Basic

Course period Unlimited

knockOn

Penetration Testing

Reviews from Early Learners

4.9

5.0

새우고래

100% enrolled

It was incredibly helpful for getting started with web hacking. A must-take course if you want to learn web hacking!!

5.0

김재경

95% enrolled

Overall, everything is fine, but the slightly lacking content is the fly in the ointment. It's a shame that relatively famous topics like Command Injection or CSRF aren't covered, so subjectively, I'd give this lecture about 4.5 stars.

5.0

고현욱

100% enrolled

It was an excellent lecture.

What you will gain after the course

Practical web hacking techniques used from CTF to the real world
Various Web Hacking Techniques and Practices
Understanding HTTP structure, cookies/sessions, and learning authentication bypass scenarios
Gain practical experience by solving simple CTF problems yourself.

🧠 Knock On Web Hacking Track - Now Recruiting Students!

Go to see detailed information!

👋 Did web hacking feel vague and difficult?

Everyone feels that way at first.
XSS, SQL Injection, CSRF...
Unfamiliar terms and codes that look nothing but difficult.
It's overwhelming even knowing where to start.
Memories of stopping while studying on YouTube and giving up while reading blogs.

🎯 That is why I created this course.

So that even those learning web hacking for the first time can reach a practical level.
This is not just a lecture that explains concepts;
it is structured as a process of hands-on experience with attacks and training to think like a hacker
to actually find and penetrate vulnerabilities.

As you follow along step by step,
you will find yourself understanding and performing hacking before you know it.

We avoid long-running lectures that only involve following along.
Through the lecture, you will establish a direction for progress, and
Practical assignments will help you develop your own critical thinking skills, and
You will acquire the intuition of a hacker who performs direct attacks.

Recommended for
these people

Who is this course right for?

Those who are interested in web hacking but don't know how to get started
Beginners who want to learn by practicing exploit attacks.
Those who have experienced getting stuck while studying alone
Those who are not security majors but want to take on the challenge of hacking
Aspiring hackers preparing for CTF or Bug Bounty programs

Need to know before starting?

A basic understanding of HTML/CSS or how the web works.
Experience using very simple Linux commands
Basic structure of C or Python
As long as you have an interest in hacking and a willingness to learn, you're good to go!

Hello
This is knockOn

Inflearn Verified

994

Learners

109

Reviews

Answers

4.9

Rating

Courses

Hello! We are knockOn, a company of hackers.

Instagram : https://www.instagram.com/knockon_official/

Our company was established to resolve the concerns of beginners feeling lost in hacking, developers wanting to gain security knowledge, and students majoring in the field who wish to pursue a career in security.

Students who want to get into hacking often find themselves asking questions like, "Do I need to start with coding first?", "How much do I need to know?", or "How does hacking actually work?" Many also have a simple fascination with it, thinking, "Hacking looks so cool—maybe I should give it a try." Our goal is to provide lectures that resolve these uncertainties and help students take their first steps into the field, turning that initial curiosity into real-world skills.
I believe many developers who want to gain security knowledge start studying because of the anxiety that their websites or services might be hacked, or to gain a competitive edge for landing a job at a better company. For these individuals, we conduct our lectures with the goal of providing compact, short, and high-density content.
I believe students majoring in this field who want to pursue a career in security likely feel the most overwhelmed. This is because school classes don't provide sufficient knowledge of security, and there are no specialized educational institutions available. It is extremely difficult to handle this on your own, so we are conducting these lectures to help you experience various security roles (penetration testing, red teaming, freelancing, etc.) and assist you in deciding on a specific career path.

With a curriculum that has produced security team members for major corporations such as Kakao, Baedal Minjok, and NCSoft, we have structured the course to guide students step-by-step from basic C programming to advanced hacking, ensuring that even those with zero prior knowledge of computer science can follow along.

Curriculum

All

78 lectures ∙ (5hr 49min)

Course Materials:

Mission

Section 1. LMS Registration Method

1 lectures

1. How to register for LMS

Section 2. SQL Injection

9 lectures ∙ (52min)

Section 3. Blind SQL Injection

7 lectures ∙ (48min)

9. What is Blind SQL Injection
05:17
10. Blind SQL Injection Exploit Example
02:47
11. Time Based Blind SQL Injection
03:13
Solving Blind SQLi problems!
Solving the What Time Is It? problem!
12. Blind SQLi Problem Solving
22:16
13. What Time Is It? Problem Solving
15:10

Section 4. SQL Injection WAF

10 lectures ∙ (52min)

Section 5. XSS (Cross Site Scripting)

7 lectures ∙ (19min)

Section 6. XSS Advanced

10 lectures ∙ (36min)

Section 7. XSS Mitigations

8 lectures ∙ (36min)

Section 8. Dom Clobbering

3 lectures ∙ (11min)

Section 9. Server Site Template Injection

4 lectures ∙ (18min)

Section 10. File Upload

6 lectures ∙ (28min)

Section 11. File Download(Local File Inclusion)

3 lectures ∙ (11min)

Section 12. CRLF Injection

3 lectures ∙ (12min)

Section 13. Logic Vulnerability

7 lectures ∙ (22min)

Published: 06/16/2025

Last updated: 07/27/2026

Reviews

All

49 reviews

4.9

49 reviews

rhrhkddn227283
Reviews 17
∙
Average Rating 4.8
02/17/2026
5
100% enrolled
I will describe the pros and cons. This review was written after completing only the problems within the lecture content, without solving the CTF problems. [Pros] 1. Problems can be solved through a stable web environment. -> Previously, users had to set up environments individually using virtual machine images, which often led to environment-specific issues that prevented even attempting the problems. Knock-on has solved this issue through its problem-solving LMS. 2. Active community (Discord) -> Technical support for resolving issues encountered during problem-solving was extremely fast and satisfying thanks to active communication on Discord. -> I am especially grateful to yeonwoo and hongsam3 for their generous advice and support. 3. Web vulnerability problems across various fields -> While other environments often focus heavily on XSS or SQL Injection, Knock-on was great because it provided exposure to diverse environments and problems (e.g., SSTI, Race Condition, etc.). [Cons] 1. I wish there were higher difficulty problems for SQL Injection. -> For example, it would be good to have problems with a difficulty level where you have to extract table and column names one by one using Blind SQL Injection from SQL metadata (e.g., information_schema.schemata in MySQL). 2. (The biggest issue) The text in the solution videos was too small to see clearly, making it difficult to follow the problem-solving screen. I hope there is a review process before uploading solution videos.
- knockon
  Instructor
  02/18/2026
  Thank you so much for taking the time to write such a thoughtful review, detailing both the pros and cons. I read through every point carefully. First of all, thank you for your positive feedback on the LMS-based web environment and the Discord community. I designed the system so that students could focus entirely on problem-solving without the unnecessary stress of setting up environments, and I’m glad that intention came through. I also appreciate your kind words regarding the communication and support on Discord; I will be sure to pass your compliments along to the individuals you mentioned. I also strongly agree with your point about the benefit of experiencing a wide range of web vulnerabilities—such as SSTI and Race Condition—rather than being limited to just XSS and SQLi. My goal was to broaden the scope of what students might encounter in real-world scenarios, and it seems that direction was well-received. Regarding the drawbacks you mentioned, I believe they are all very valid points. I plan to actively incorporate high-difficulty SQL Injection challenges (especially those involving Blind-based metadata extraction) into future advanced tracks or as additional problems. I agree that we need "endurance-testing problems" rather than just simple bypasses. The issue with the font size in the solution videos is also very important feedback. Since you highlighted it as the biggest issue, I will ensure that all future uploads undergo a much stricter pre-check for resolution, scaling, and readability. A review written from such a detailed and technical perspective is incredibly helpful for improving the course. Thank you once again, and I will strive to provide even better content in future sessions! :)
hwgo8095
Reviews 1
∙
Average Rating 5.0
06/28/2026
5
100% enrolled
It was an excellent lecture.
pooh10217515
Reviews 2
∙
Average Rating 5.0
07/23/2026
5
100% enrolled
It was incredibly helpful for getting started with web hacking. A must-take course if you want to learn web hacking!!
- knockon
  Instructor
  07/25/2026
  Thank you so much for the course review! 😊 Just hearing that it helped you get started with web hacking gives me a lot of strength. I designed the course so that beginners could follow along without pressure and build a solid foundation, and I'm so glad you appreciated that part. I will continue to work hard so that this remains the first course recommended to those new to web hacking. Thank you!
s250226669
Reviews 1
∙
Average Rating 5.0
07/22/2026
Edited
5
95% enrolled
Overall, everything is fine, but the slightly lacking content is the fly in the ointment. It's a shame that relatively famous topics like Command Injection or CSRF aren't covered, so subjectively, I'd give this lecture about 4.5 stars.
- knockon
  Instructor
  07/25/2026
  Thank you for your thoughtful feedback! 😊 I'm glad you were satisfied overall, but I'm especially grateful that you shared specific details about the areas that were lacking. As you mentioned, I agree that widely used topics like Command Injection or CSRF are definitely worth covering. While I structured the course considering the overall length and learning flow, I will look into ways to add these topics or include them in an advanced course in the future. Since you rated it a 4.5, I will continue to improve so that it can become a course that fills that remaining 0.5 points. Thank you once again for your valuable feedback! 😊
hopefordream
Reviews 20
∙
Average Rating 4.8
06/14/2026
5
100% enrolled
It was a great lecture.

knockOn's other courses

Check out other courses by the instructor!

System Hacking & Reversing: Learning Everything from Beginner to Intermediate in One Go

knockOn

A complete curriculum for those learning hacking for the first time. From beginner to intermediate, finish it all with a single course.

Basic

System Hacking, security training

System Hacking & Reversing: Learning Everything from Beginner to Intermediate in One Go

knockOn

The Roadmap to Becoming a White Hacker That No One Told You About: A to Z

knockOn

Everything you need to know to become an offensive white hacker. From the path to becoming an elite hacker to conquering the information security market, all the tips are compressed into one lecture!

Beginner

System Hacking, Offensive Security

The Roadmap to Becoming a White Hacker That No One Told You About: A to Z

knockOn

Similar courses

Explore other courses in the same field!

Linux Kernel Hacking: A to Z

v4bel

This lecture analyzes various protection techniques in the Linux kernel, methods to bypass them, and various vulnerabilities. Practical examples are provided for each lecture.

Intermediate

Linux, System Hacking, Penetration Testing

Linux Kernel Hacking: A to Z

v4bel

[Easy for Non-Majors] Information Security Incidents: From Cause Analysis by Type to Solutions

88888

[Introduction to Security Incident Response: Learning through Scenarios of Web Server Hacking, Ransomware, and Account Takeover] This course examines why various information security incidents—such as web server hacking, ransomware, account takeover, and internal penetration—occur and how they spread, categorized by incident type. Students will follow each incident scenario to understand the attack flow, analyze the core causes of the incident, and learn how to resolve issues and prevent recurrence through security architectures such as firewalls, DMZ, access control, privilege management, backup, and log monitoring. Rather than a simple explanation of security concepts, this is a scenario-based introduction to information security that provides a comprehensive understanding from root cause analysis to resolution strategies.

Beginner

Penetration Testing, Network, Computer Architecture

[Easy for Non-Majors] Information Security Incidents: From Cause Analysis by Type to Solutions

88888

Talk about web hacking and mock hacking in the field

crehacktive

Introduction to web hacking and mock hacking for those who are new to web hacking and job seekers in related fields

Beginner

Penetration Testing

Talk about web hacking and mock hacking in the field

crehacktive

[OT Security-Common] Understanding the AI Era through Manufacturing Security Field Cases

88888

"Understanding Manufacturing Security in the AI Era through Field Cases" is a course designed to provide an easy understanding of OT security, which is growing in importance within smart factories and AI-based manufacturing environments, focusing on real-world field cases. This lecture explains core concepts frequently encountered in manufacturing sites, such as OT, ICS, PLC, SCADA, HMI, and MES, and compares the differences between IT security and OT security. Furthermore, it examines security threats that can occur on the manufacturing floor—such as ransomware, remote access exploitation, partner account hijacking, production line shutdowns, equipment malfunctions, and data forgery—through case studies. Through this course, students will understand the basic structure of OT security in manufacturing and identify the security perspectives necessary to protect production facilities and industrial control systems. Additionally, it provides a common foundation for further learning in industry-specific manufacturing security courses.

Beginner

Penetration Testing, Operating System, security

[OT Security-Common] Understanding the AI Era through Manufacturing Security Field Cases

88888

Web technology basics you must know

crehacktive

This is a course where you can learn the basics of web technology. You can learn the basics of web technology in a short period of time. If you are interested in studying or getting a job related to the web, you must take this course!

Beginner

Penetration Testing

Web technology basics you must know

crehacktive

Understanding AWS Cloud Service Infrastructure Construction, Hacking, and Security

boanproject

IT services are rapidly transitioning to cloud environments. You will learn security practices from basic virtual infrastructure construction to security threat monitoring and vulnerability diagnosis for each area to secure the Amazon AWS cloud environment.

Basic

AWS, Penetration Testing

Understanding AWS Cloud Service Infrastructure Construction, Hacking, and Security

boanproject

Mock Hacking Job Preparation, Interview Preparation Course

boanproject

This lecture provides a general guide on how to prepare while studying when you want to choose a career in IT security penetration testing, and what questions and answers to prepare for the interview. I will share my experience working as a penetration testing consultant, at large companies, and in the financial sector, and currently running a penetration testing consulting business.

Beginner

Penetration Testing, Tech Interview

Mock Hacking Job Preparation, Interview Preparation Course

boanproject

Web Hacking from Beginner to Intermediate: Learn It All at Once