강의

N
챌린지

멘토링

로드맵

BEST
Security & Network

/

Computer Security

Analysis of File Download Vulnerability Attack Techniques and Practical Cases by a Simulated Hacking Practitioner

Easy-to-follow file download vulnerability attack techniques from web hacking beginners to practitioners! File download vulnerability attack techniques and advanced attack techniques used in practice! And how to apply secure coding!

(4.9) 72 reviews

665 learners

  • crehacktive
Penetration Testing

Reviews from Early Learners

What you will learn!

  • Understanding the File Download Feature

  • Understanding File Download Vulnerabilities

  • How to Analyze File Download Vulnerabilities

  • File download vulnerability deep attack technique

  • Verification logic bypass technique through practical case analysis

  • Countermeasures and Secure Coding

A clear diagnosis up to practical use ,
Learn about file download vulnerability attacks!

📖 Why should you learn about file download vulnerability attacks ?

File download functionality is an essential feature of web services, and many web services utilize it. However, this functionality can introduce high-risk vulnerabilities that allow unauthorized downloads of important files from the server.

Therefore, from an attacker's perspective, this vulnerability is highly exploitable, and from a defender's perspective, it's a vulnerability that must be defended against. To do this, understanding file download vulnerability attacks is essential, right?

📖 Acquire basic knowledge through detailed attack principle analysis!

We'll take a detailed, step-by-step look at the attack principles so even beginners can easily understand them!

📖 Attack techniques and advanced attacks applicable in practice!

This course covers vulnerability analysis methods for attack targets, attack techniques, and advanced attack techniques in detail! (3 advanced attack practice cases, 7 practical case studies)

📖 We even provide a virtual environment used for practical environment analysis~!

We provide 7 practical virtual environments where you can practice together!
Improve your skills through practical environment analysis! ( The three advanced attack practice cases do not provide a virtual environment! )

📖 Pointing out the incorrect Critical Information and Communications Infrastructure Response Guide! And what's the correct response?!

Many security companies have suggested countermeasures through their Critical Information and Communications Infrastructure Guides, but these are often poorly written and vulnerable codes. Learn why this is so, what's wrong, and how to properly implement countermeasures.

🛠 Programs covered here

  • Burp Suite
  • APMSetup
  • Tomcat

※ How to use Burp Suite is not covered in this training. You can refer to the basic usage method in the training " Stories about Web Hacking and Simulated Hacking in the Field ".

🙋🏻‍♂️ Questions Q&A

Q. I want to take the course, but is there anything I need to know beforehand?
A. We recommend that you take the two "Required Viewing Courses" below before taking this course.

Q. Is this training available to practitioners/security academy graduates?
A. It doesn't matter. It will help you decide what to process more, what to add, and what direction to take in your own diagnosis.

Q. If I complete the training, can I get a practical diagnosis?
A. Of course! However, simply receiving training isn't enough. To achieve satisfactory results, you need to study and practice on your own. To achieve anything, you need to put in the effort.

💡 Must-see lectures

Web Technology Fundamentals You Must Know
A course to learn the basics of web technology

※ This training PPT uses Nanum font provided by Naver.

Recommended for
these people

Who is this course right for?

  • Web Hacking Beginner

  • Web security professionals

Need to know before starting?

  • Web Basics

Hello
This is

26,072

Learners

1,381

Reviews

501

Answers

4.9

Rating

18

Courses

안녕하세요, 크리핵티브입니다.

다년간 다양한 웹 서비스를 진단하고 연구한 경험을 바탕으로, 실무에 바로 적용 가능한 지식을 인프런 플랫폼에서 공유해오고 있습니다.

그리고 웹 해킹 기초를 체계적으로 다룬 『크리핵티브의 한 권으로 끝내는 웹 해킹 바이블』을 집필했습니다. 기초가 부족한 분들께는 이 책으로 학습을 시작하실 것을 권합니다.

 

Curriculum

All

51 lectures ∙ (7hr 10min)

Course Materials:

Lecture resources
Published: 
Last updated: 

Reviews

All

72 reviews

4.9

72 reviews

  • rlekfltkfka42685님의 프로필 이미지
    rlekfltkfka42685

    Reviews 4

    ∙

    Average Rating 5.0

    5

    98% enrolled

    I am currently a mock hacking practitioner, and I think the most important advantage of this lecture was the detailed explanation of the file download vulnerability and the accurate countermeasures. I was able to learn in detail why file downloads are fatal, what the principles are, and I think I learned a lot about the methodological aspects used in practice. As you said in the lecture, I plan to listen to this lecture twice more, not just once. If there is a lecture from Creative in the future, I will apply and study without hesitation. Thank you for the great lecture!

    • crehacktive
      Instructor

      It seems that many practitioners are listening to the lectures. Haha. I'm really glad that it was helpful. Haha. There will be many good educational programs in the future, so please pay a lot of attention.^^

  • webwh님의 프로필 이미지
    webwh

    Reviews 14

    ∙

    Average Rating 4.5

    5

    100% enrolled

    I listened to the injection lecture and the download lecture, and the best thing was that it was processed. I can't wait for the next lecture to come out.. I hope it comes out soon. ㅎㅎ It was so helpful, I can only thank you..!

    • crehacktive
      Instructor

      Thank you so much for leaving such great reviews for each lecture! The process of attacking is the main point of my lecture, and you covered it so well. Thank you so much!

  • crehacktive님의 프로필 이미지
    crehacktive

    Reviews 1

    ∙

    Average Rating 5.0

    5

    27% enrolled

    7 practical case studies are provided in a virtual environment, but 3 advanced attack practical cases are not provided in a virtual environment. Please take note of this and apply for the training! (It is also listed on the training introduction page.)

    • grasses120776님의 프로필 이미지
      grasses120776

      Reviews 1

      ∙

      Average Rating 5.0

      5

      96% enrolled

      Hello, I am currently working on security control, and I see a lot of packets related to route detours while working, but I didn't really understand the concept, so I took this lecture. It was explained in detail, and I think it will be very helpful for my work because it includes detailed operating principles, various practical exercises, and response measures. I plan to take the upload vulnerability lecture that you gave later. Thank you for making such a great lecture!

      • crehacktive
        Instructor

        You are in the security field! Many practitioners are listening to my training. Thank you so much for the detailed course review! I will come back with even better lectures in the future. Have a nice day~!

    • ruke240888님의 프로필 이미지
      ruke240888

      Reviews 16

      ∙

      Average Rating 4.3

      5

      96% enrolled

      Um, I'm trying to write a course review, but I'm really having a hard time. I don't know how to express it. I solved a lot of problems like CTF, but I only understood the download vulnerability briefly. Even if I searched and understood it on my own, it was hard to draw the big picture. However, before taking this course, I had some doubts and arrogant thoughts like, "Is this just some kind of course?" (I guess I understand most of it!) I guess I can call it pride! I'm sorry to the instructor..ㅠ I knew some parts in the first few parts! But as I went further and further back, I started to see umm???????? ???????????? ???????? and I suddenly thought, "Ah!" I watched and ... There may be some people who think, "There's only one download vulnerability ~ There's only one upload vulnerability ~" and "Oh, there are really no reviews, so it must not be that good ~"! But! It includes really advanced lectures that you can't hear in those lectures! (This is not a criticism of other lectures! It means that it was that good of a lecture!ㅎㅎ) I understand that you can get a refund if you don't receive the practice materials. (According to Inflearn policy? Check the details!!) I think it would be good to listen to it. Disadvantages: There were none! ㅎㅎㅎ

      • crehacktive
        Instructor

        An incredibly long course review! And a rave review! Thank you so muchㅠ God, that's too much praiseㅠ Most web hacking courses usually cover all vulnerabilities in one course, so it seems like many people are a little hesitant about taking a short course. You've spoken precisely about that part. ㅎㅎ I'm so glad that my lecture was helpful to you! I can only thank you. Have a great day~!

    $26.40

    crehacktive's other courses

    Check out other courses by the instructor!

    Web Hacking & Secure Coding That Web Developers and Information Security Beginners Must Know강의 썸네일

    Web Hacking & Secure Coding That Web Developers and Information Security Beginners Must Know

    crehacktive

    An introductory course on web hacking for information security beginners and web developers! Start web hacking in a fun way with this course!

    초급

    초급

    Penetration Testing, Injection

    Web Hacking & Secure Coding That Web Developers and Information Security Beginners Must Know강의 썸네일

    Web Hacking & Secure Coding That Web Developers and Information Security Beginners Must Know

    crehacktive

    Analysis of File Upload Vulnerability Attack Techniques and Practical Cases by a Simulated Hacking Practitioner: PART 1강의 썸네일

    Analysis of File Upload Vulnerability Attack Techniques and Practical Cases by a Simulated Hacking Practitioner: PART 1

    crehacktive

    The ultimate web hacking master! File upload vulnerability attack technique! This is a training that will further improve the students' web hacking skills through a completely different approach from the existing known methods!

    초급

    초급

    Penetration Testing

    Analysis of File Upload Vulnerability Attack Techniques and Practical Cases by a Simulated Hacking Practitioner: PART 1강의 썸네일

    Analysis of File Upload Vulnerability Attack Techniques and Practical Cases by a Simulated Hacking Practitioner: PART 1

    crehacktive

    XSS attack techniques explained by a mock hacking practitioner강의 썸네일

    XSS attack techniques explained by a mock hacking practitioner

    crehacktive

    This lecture covers the king of client attacks, XSS (Cross-Site Scripting). You can systematically learn about the basic concepts of XSS, the attack principles, and most importantly, what process to go through to perform the attack procedure.

    초급

    초급

    Penetration Testing, xss

    XSS attack techniques explained by a mock hacking practitioner강의 썸네일

    XSS attack techniques explained by a mock hacking practitioner

    crehacktive

    File Upload Vulnerability Advanced Attack Techniques PART2-3: Attack Methodologies in Various Practical Environments강의 썸네일

    File Upload Vulnerability Advanced Attack Techniques PART2-3: Attack Methodologies in Various Practical Environments

    crehacktive

    The ultimate web hacking! File upload vulnerability attack technique! Following Part 1, Part 2 '3rd part' education covers more advanced techniques in depth.

    중급이상

    중급이상

    Penetration Testing

    File Upload Vulnerability Advanced Attack Techniques PART2-3: Attack Methodologies in Various Practical Environments강의 썸네일

    File Upload Vulnerability Advanced Attack Techniques PART2-3: Attack Methodologies in Various Practical Environments

    crehacktive

    File Upload Vulnerability Advanced Attack Techniques PART2-1: File Upload Library Analysis and Attack Methodology강의 썸네일

    File Upload Vulnerability Advanced Attack Techniques PART2-1: File Upload Library Analysis and Attack Methodology

    crehacktive

    The ultimate web hacking! File upload vulnerability attack technique! Part 2 of the 'Part 1' education follows Part 1 and covers more advanced techniques.

    중급이상

    중급이상

    Penetration Testing

    File Upload Vulnerability Advanced Attack Techniques PART2-1: File Upload Library Analysis and Attack Methodology강의 썸네일

    File Upload Vulnerability Advanced Attack Techniques PART2-1: File Upload Library Analysis and Attack Methodology

    crehacktive

    File Upload Vulnerability Advanced Attack Techniques PART2-2: Basic Knowledge and Techniques for Bypassing Web Firewalls강의 썸네일

    File Upload Vulnerability Advanced Attack Techniques PART2-2: Basic Knowledge and Techniques for Bypassing Web Firewalls

    crehacktive

    The ultimate web hacking! File upload vulnerability attack technique! Part 2 of the '2nd part' education follows Part 1 and covers more advanced techniques.

    중급이상

    중급이상

    Penetration Testing

    File Upload Vulnerability Advanced Attack Techniques PART2-2: Basic Knowledge and Techniques for Bypassing Web Firewalls강의 썸네일

    File Upload Vulnerability Advanced Attack Techniques PART2-2: Basic Knowledge and Techniques for Bypassing Web Firewalls

    crehacktive

    Skill-Up! Webshell Obfuscation Techniques for Bypassing Webshell Detection Solutions강의 썸네일

    Skill-Up! Webshell Obfuscation Techniques for Bypassing Webshell Detection Solutions

    crehacktive

    Basic understanding of web shells and web shell detection solutions, as well as attack methods and obfuscation techniques for bypassing them!

    초급

    초급

    Penetration Testing, Web Shell

    Skill-Up! Webshell Obfuscation Techniques for Bypassing Webshell Detection Solutions강의 썸네일

    Skill-Up! Webshell Obfuscation Techniques for Bypassing Webshell Detection Solutions

    crehacktive

    Advanced SQL Injection Attack Techniques Explained by a Simulated Hacking Practitioner: PART 2강의 썸네일

    Advanced SQL Injection Attack Techniques Explained by a Simulated Hacking Practitioner: PART 2

    crehacktive

    The second lecture on SQL Injection, taught by a mock hacking practitioner! The first lecture covered the basics and the core principles of attacks, while the second lecture is about technical advanced attack techniques. Therefore, taking the first lecture is a must!

    중급이상

    중급이상

    Penetration Testing, Injection

    Advanced SQL Injection Attack Techniques Explained by a Simulated Hacking Practitioner: PART 2강의 썸네일

    Advanced SQL Injection Attack Techniques Explained by a Simulated Hacking Practitioner: PART 2

    crehacktive

    SQL Injection Attack Techniques and Secure Coding Explained by a Simulated Hacking Practitioner: PART 1강의 썸네일

    SQL Injection Attack Techniques and Secure Coding Explained by a Simulated Hacking Practitioner: PART 1

    crehacktive

    SQL Injection, the flower of web hacking, explained by a mock hacking practitioner! Learn attack and defense at the same time.

    초급

    초급

    Penetration Testing, Injection

    SQL Injection Attack Techniques and Secure Coding Explained by a Simulated Hacking Practitioner: PART 1강의 썸네일

    SQL Injection Attack Techniques and Secure Coding Explained by a Simulated Hacking Practitioner: PART 1

    crehacktive

    Web technology basics you must know강의 썸네일

    Web technology basics you must know

    crehacktive

    This is a course where you can learn the basics of web technology. You can learn the basics of web technology in a short period of time. If you are interested in studying or getting a job related to the web, you must take this course!

    입문

    입문

    Penetration Testing

    Web technology basics you must know강의 썸네일

    Web technology basics you must know

    crehacktive

    Skill-Up! Create a web shell that you can learn and use right away강의 썸네일

    Skill-Up! Create a web shell that you can learn and use right away

    crehacktive

    Web shell is the core tool for file upload vulnerability attacks! Let's learn how to create a web shell together through this lecture~!

    초급

    초급

    Web Shell, Bootstrap

    Skill-Up! Create a web shell that you can learn and use right away강의 썸네일

    Skill-Up! Create a web shell that you can learn and use right away

    crehacktive

    Basic SQL Grammar for Successful SQL Injection Attacks강의 썸네일

    Basic SQL Grammar for Successful SQL Injection Attacks

    crehacktive

    The basic steps to learn SQL injection attacks, the flower of web hacking! This is a lecture on basic SQL grammar!

    초급

    초급

    SQL, Penetration Testing, MySQL

    Basic SQL Grammar for Successful SQL Injection Attacks강의 썸네일

    Basic SQL Grammar for Successful SQL Injection Attacks

    crehacktive

    File Upload Vulnerability Advanced Attack Techniques PART2 [Integrated Edition]강의 썸네일

    File Upload Vulnerability Advanced Attack Techniques PART2 [Integrated Edition]

    crehacktive

    The ultimate web hacking! File upload vulnerability attack technique! Part 2 of the 'Part 1' education follows Part 1 and covers more advanced techniques.

    중급이상

    중급이상

    Penetration Testing, Java, Web Shell

    File Upload Vulnerability Advanced Attack Techniques PART2 [Integrated Edition]강의 썸네일

    File Upload Vulnerability Advanced Attack Techniques PART2 [Integrated Edition]

    crehacktive

    One-point lesson on web security for creating a secure website강의 썸네일

    One-point lesson on web security for creating a secure website

    crehacktive

    In this course, you will learn how to create secure web services.

    초급

    초급

    One-point lesson on web security for creating a secure website강의 썸네일

    One-point lesson on web security for creating a secure website

    crehacktive

    OAuth 2.0 Concepts and Principles Learned Through Practice, Hacking, and Security강의 썸네일

    OAuth 2.0 Concepts and Principles Learned Through Practice, Hacking, and Security

    crehacktive

    We will take a closer look at the working principles through core theories and practices of the OAuth 2.0 protocol. And we will analyze the OAuth 2.0 protocol from the perspective of hacking and security.

    중급이상

    중급이상

    Penetration Testing, OAuth

    OAuth 2.0 Concepts and Principles Learned Through Practice, Hacking, and Security강의 썸네일

    OAuth 2.0 Concepts and Principles Learned Through Practice, Hacking, and Security

    crehacktive

    Web hacking that teaches you the principles by following along: WebGoat강의 썸네일

    Web hacking that teaches you the principles by following along: WebGoat

    crehacktive

    A web hacking course where you can learn, practice, and understand the principles by simply following along with WebGoat problem solving!

    초급

    초급

    Penetration Testing, WebGoat

    Web hacking that teaches you the principles by following along: WebGoat강의 썸네일

    Web hacking that teaches you the principles by following along: WebGoat

    crehacktive

    Talk about web hacking and mock hacking in the field강의 썸네일

    Talk about web hacking and mock hacking in the field

    crehacktive

    Introduction to web hacking and mock hacking for those who are new to web hacking and job seekers in related fields

    입문

    입문

    Penetration Testing

    Talk about web hacking and mock hacking in the field강의 썸네일

    Talk about web hacking and mock hacking in the field

    crehacktive

    Similar courses

    Explore other courses in the same field!

    Analysis of File Upload Vulnerability Attack Techniques and Practical Cases by a Simulated Hacking Practitioner: PART 1강의 썸네일

    Analysis of File Upload Vulnerability Attack Techniques and Practical Cases by a Simulated Hacking Practitioner: PART 1

    crehacktive

    The ultimate web hacking master! File upload vulnerability attack technique! This is a training that will further improve the students' web hacking skills through a completely different approach from the existing known methods!

    초급

    초급

    Penetration Testing

    Analysis of File Upload Vulnerability Attack Techniques and Practical Cases by a Simulated Hacking Practitioner: PART 1강의 썸네일

    Analysis of File Upload Vulnerability Attack Techniques and Practical Cases by a Simulated Hacking Practitioner: PART 1

    crehacktive

    XSS attack techniques explained by a mock hacking practitioner강의 썸네일

    XSS attack techniques explained by a mock hacking practitioner

    crehacktive

    This lecture covers the king of client attacks, XSS (Cross-Site Scripting). You can systematically learn about the basic concepts of XSS, the attack principles, and most importantly, what process to go through to perform the attack procedure.

    초급

    초급

    Penetration Testing, xss

    XSS attack techniques explained by a mock hacking practitioner강의 썸네일

    XSS attack techniques explained by a mock hacking practitioner

    crehacktive

    Understanding AWS Cloud Service Infrastructure Construction, Hacking, and Security강의 썸네일

    Understanding AWS Cloud Service Infrastructure Construction, Hacking, and Security

    boanproject

    IT services are rapidly transitioning to cloud environments. You will learn security practices from basic virtual infrastructure construction to security threat monitoring and vulnerability diagnosis for each area to secure the Amazon AWS cloud environment.

    초급

    초급

    AWS, Penetration Testing

    Understanding AWS Cloud Service Infrastructure Construction, Hacking, and Security강의 썸네일

    Understanding AWS Cloud Service Infrastructure Construction, Hacking, and Security

    boanproject

    Mock Hacking Job Preparation, Interview Preparation Course강의 썸네일

    Mock Hacking Job Preparation, Interview Preparation Course

    boanproject

    This lecture provides a general guide on how to prepare while studying when you want to choose a career in IT security penetration testing, and what questions and answers to prepare for the interview. I will share my experience working as a penetration testing consultant, at large companies, and in the financial sector, and currently running a penetration testing consulting business.

    입문

    입문

    Penetration Testing, Tech Interview

    Mock Hacking Job Preparation, Interview Preparation Course강의 썸네일

    Mock Hacking Job Preparation, Interview Preparation Course

    boanproject

    Web technology basics you must know강의 썸네일

    Web technology basics you must know

    crehacktive

    This is a course where you can learn the basics of web technology. You can learn the basics of web technology in a short period of time. If you are interested in studying or getting a job related to the web, you must take this course!

    입문

    입문

    Penetration Testing

    Web technology basics you must know강의 썸네일

    Web technology basics you must know

    crehacktive