Security Testing OWASP TOP 10

В качестве растущей тенденции в ИТ-индустрии на кибербезопасность разрабатываемых продуктов и экспоненциально увеличивает спрос на специалистов, которые разбираются в том какие методы защиты на атаки со стороны мошенников можно применить, дабы защитить себя от злоумышленников. В рамках тренинга, который состоит в общем из 18+ часов, вы узнаете о ТОП-10 веб уязвимостей, определенных OWASP. Вы не только узнаете о них в теории, но и будете использовать каждый из них на практике, употребляя при этом различные инструменты. Это будет весело, встретимся там!

Requirements:

- Professional level: Middle Manual QA and higher

- Laptop: Wi-fi, OS Kali Linux or virtualbox with OS Kali Linux

 

In training we work with this tools:

Sqlmap, Burp Suite, OWASP ZAP, Metasploit, Nmap, Ettercap, Social engineering toolkit,  BeEF, Rainbowcrack, Slowloris

DAY 1

 

 

1) Introduction into Security Testing:

- History security.

- Hacker attacks.

- Security testing in SDLC.

- Tools for Security testing.

- OWASP TOP 10 - Brief introduction.

 

2) A1:Injection:

- What it is “Injection” attack.

- Examples of attacks.

- Сauses of “Injection” vulnerability.

- Tools for search SQL injection.

- Demo and Practice: in search SQL injection

- Protection Recommendations.

 

3) A2:Broken Authentication:

- What it is “Broken Authentication”.

- Examples of attacks.

- Сauses of “Broken Authentication” vulnerability.

- Tools for search “Broken Authentication”.

- Demo and Practice: in search “Broken Authentication”

- Protection Recommendations.

 

4) A3:Sensitive Data Exposure:

- What it is “Sensitive Data Exposure”.

- Examples of attacks.

- Сauses of “Sensitive Data Exposure” vulnerability.

- Tools for search “Sensitive Data Exposure”.

- Demo and Practice: in search “Sensitive Data Exposure”

- Protection Recommendations.

 

5) A4:XML External Entities (XXE):

- What it is “XML External Entities (XXE)”.

- Examples of attacks.

- Сauses of “XML External Entities (XXE)” vulnerability.

- Tools for search “XML External Entities (XXE)”.

- Demo and Practice: in search “XML External Entities (XXE)”

- Protection Recommendations.

 

6) A5:Broken Access Control:

- What it is “Broken Access Control”.

- Examples of attacks.

- Сauses of “Broken Access Control” vulnerability.

- Tools for search “Broken Access Control”.

- Demo and Practice: in search “Broken Access Control”

- Protection Recommendations.

 

DAY 2

 

 

7) A6:Security Misconfiguration:

- Reminder of the things learned previous day.

- What it is “Security Misconfiguration” attack.

- Examples of attacks.

- Сauses of “Security Misconfiguration” vulnerability.

- Protection Recommendations.

 

8) A7: Cross-Site Scripting (XSS):

- What it is “Cross-Site Scripting (XSS)” attack.

- Examples of attacks.

- Сauses of “Cross-Site Scripting (XSS)” vulnerability.

- Tools for search "Cross-Site Scripting (XSS)".

- Demo and Practice: in search "Cross-Site Scripting (XSS)"

- Protection Recommendations.

 

9) A8:Insecure Deserialization:

- What it is “Insecure Deserialization”.

- Examples of attacks.

- Сauses of “Insecure Deserialization” vulnerability.

- Tools for search “Insecure Deserialization”.

- Demo and Practice: in search “Insecure Deserialization” 

- Protection Recommendations.

 

10) A9:Using Components with Known Vulnerabilities:

- What it is?.

- Examples of attacks.

- Сauses of vulnerability.

- Tools for search vulnerability.

- Demo and Practice: in search vulnerability

- Protection Recommendations.

 

11) A10:Insufficient Logging & Monitoring:

- What it is Insufficient Logging & Monitoring” attack.

- Examples of attacks.

- Сauses of “Insufficient Logging & Monitoring” vulnerability. 

- Protection Recommendations.

 

12) CSRF

- What it is CSRF.

- Examples of attacks.

 

13) Closing-Up:

- Conclusions.

- Literature.

- Recommendations on further steps. 

gallery/0_oeehiifqspxewexa
gallery/logo3

Тренинг вечерний на 1.5 месяца

и с домашним заданием -> ждет тебя тут

 

Тренинг интенсив за 2 дня -> 18 часов -> ждет тебя тут

 

gallery/26239455_219312255292583_5658555480113912273_n