인프런 - 라이프타임 커리어 플랫폼

In mock hacking practice, mock hacking of iOS mobile apps is now essential! This is a basic lecture for those who are new to iOS app diagnosis. It consists of basic prerequisite knowledge required for diagnosis and practical training centered on the mock hacking work.

Have you ever wondered how real attackers carry out cyberattacks? BHPT is a comprehensive, hands-on course that uses on-demand labs to simulate penetration testing from an attacker's perspective on specific hosts, teaching methodologies for discovering, attacking, reporting, and responding to vulnerabilities.

IT services are rapidly transitioning to a cloud environment. You will learn security practices from the basics of building a virtual infrastructure to monitor security threats in each area and diagnose vulnerabilities to secure the domestic Naver cloud environment.

This lecture provides a general guide on how to prepare while studying when you want to choose a career in IT security penetration testing, and what questions and answers to prepare for the interview. I will share my experience working as a penetration testing consultant, at large companies, and in the financial sector, and currently running a penetration testing consulting business.

This lecture covers the king of client attacks, XSS (Cross-Site Scripting). You can systematically learn about the basic concepts of XSS, the attack principles, and most importantly, what process to go through to perform the attack procedure.

This is a basic course for those preparing for bug hunting (bug bounty) and mock hacking work. Web hacking is essential for mock hacking work. After learning web hacking, you can learn various cases from web hacking to system hacking by using a virtual web/server environment where you can study based on scenarios.

IT services are rapidly transitioning to cloud environments. You will learn security practices from basic virtual infrastructure construction to security threat monitoring and vulnerability diagnosis for each area to secure the Amazon AWS cloud environment.

From beginners to practitioners who are curious about mock hacking work and web application vulnerabilities, it can be viewed. The following contents are covered: Bee-box is a virtual environment where bWAPP (buggy Web Application), an open source web application that can attack web vulnerabilities, is installed, and it includes the latest system attack techniques and the difficulty level is adjusted for each item.

The ultimate web hacking! File upload vulnerability attack technique! Following Part 1, Part 2 '3rd part' education covers more advanced techniques in depth.

An introductory course on web hacking for information security beginners and web developers! Start web hacking in a fun way with this course!

SQL Injection, the flower of web hacking, explained by a mock hacking practitioner! Learn attack and defense at the same time.

The PNT course is a hands-on course designed to follow the BHPT course and teach the concepts of pivoting and tunneling, which are necessary for lateral movement within a network. Students will learn pivoting techniques to bypass firewalls by manipulating network traffic and learn how to cross boundaries in various network environments through a practical lab.

You can learn how to fully utilize Frida, which is used in mock hacking practice.

For those who have chosen the path of a mock hacking consultant, we have organized it so that they can understand the project direction and mock hacking work necessary for preparing for employment. We will provide the best answer by suggesting a learning direction through the know-how and question cases from the mock hacking employment target study group that has been conducted for many years.

Basic understanding of web shells and web shell detection solutions, as well as attack methods and obfuscation techniques for bypassing them!

We have created a method for mobile diagnostic methods (static/dynamic) that can be learned by following the practice app and lecture materials. It covers everything from the basics to the techniques and tips used in practice, so it will be of great help to mobile consultants.

Are you curious about how hacking attacks are carried out? Are you curious about how to defend? Let's perform a brute force attack using simple python code. Through this, you will learn how attacks and defenses are carried out. :)

Many security hacking incidents are occurring by utilizing OSINT (Open Source Intelligence) search services. We will discuss how to utilize it to first monitor and eliminate potential security threats from an offensive perspective before an attack occurs.

This is an introductory malware analysis course that even beginners can easily understand. Based on methodologies such as static analysis, dynamic analysis, and automated analysis of malware analysis, you will analyze various sample cases. It also covers in detail how to use various tools necessary for malware analysis.

You can learn about the functional utilization of OWASP-ZAP, a web proxy required for running web services, and the virtual environment image Security Onion for analyzing breach response according to attack patterns.