Overview

In this course, I have covered all the Security Testing that are required for Beginners to get started with.If you are a beginner or fresher or new to Security Testing, and want to figure out whether this Security Testing field is for you or not, then this course is for you. This is an overview course, where by the end of this course, you can find out whether Security Testing is for you or not, its opportunities, basic knowledge and guidance required for moving into Security Testing field from Software Testing field. The below are the different basic topics that are covered in this course:What is Security Testing?Importance of Security Testing with ExamplesFuture (Jobs, Skill Shortage, Demand, unemployment rate, Pay scale and Career Advice)Security Testing versus Vulnerability Assessment versus Penetration TestingSecurity Testing Versus HackingDon't end up in JailManual Security Testing Versus Security Testing ToolsCIA Triad - Basic High Level Objectives of Security TestingSecurity Testing - Vulnerability versus Threat versus RiskSecurity Testing (Basics) - HTTP MethodsSecurity Testing (Basics) - HTTP Status CodesSecurity Testing (Basics) - CookieSecurity Testing (Basics) - Cookie versus Session ID versus SessionSecurity Testing (Basics) - Cryptography and different TechniquesSecurity Testing (Basics) - Symmetric Key EncryptionSecurity Testing (Basics) - Asymmetric Key EncryptionSecurity Testing (Basics) - Symmetric & Asymmetric Key SizesSecurity Testing (Basics) - Finding Asymmetric Key Encryption used by different websitesSecurity Testing (Basics) - Encoding and DecodingSecurity Testing (Basics) - HashingSecurity Testing (Basics) - HTTP is StatelessSecurity Testing (Basics) - HTTPSSecurity Testing (Basics) - Input Validation and Output EncodingSecurity Testing (Basics) - Client Side Validation versus Server Side ValidationSecurity Testing (Basics) - Blacklisting versus Whitelisting (Input Validation)Security Testing Basics - SSL versus TLSSecurity Testing Basics - HTTP versus HTTPSSecurity Testing Basics - Authentication vesus AuthorizationSecurity Testing Terminology - Payloads and Malicious InputSecurity Testing Terminology - DASTSecurity Testing - Demo Application for PracticeSecurity Tesitng Process (Testing Phase of SDLC)OWASPOWASP Top 10 Vulnerabilities Injection vulnerability and different typesSQL Basics for SQL InjectionAttack Surface and Attack VectorSQL Injection (SQLi) Anatomy of SQL Injection PayloadSecurity Testing - Second Demo Application for PracticeSQL Injection Payload - Vulnerability Assessment SQL Injection Attack SurfaceInstalling BurpSuiteUsing BurpSuite as Proxy Tool for Intercepting Requests Configuring BurpSuite as Proxy with Firefox browserConfiguring BurpSuite as Proxy for Chrome browserConfiguring BurpSuite as Proxy for Internet Explorer browserInstalling WebGoatBypassing Client Side Validation using BurpSuiteIncreasing Attack Surface using BurpSuite

Skills

Reviews