Free Penetration Testing & Bug Bounty

 

Recon for Ethical Hacking / Penetration Testing & Bug Bounty

Complete Methodology for Ethical Hacking,

 Pen-testing & Bug Bounties with Live Attacks 

 

 

Description

This course starts with the Basics of Recon & Bug Bounty Hunting Fundamentals to Advance Exploitation.

This course starts with basics with Web and Web Server Works and how it can be used in our day to day life. We will also learn about DNS, URL vs URN vs URI and Recon for Bug Bounties to make our base stronger and then further move on to Target Expansion, Content Discovery, Fuzzing CMS Identification, Certificate Transparency, Visual Recon , Github Recon , Custom Wordlists , Mind maps, Bug Bounty Automation, Bug Bounty Platforms with practicals.

 

This course covers All the Tools & Techniques for Penetration Testing & Bug Bounties for a better understanding of what’s happening behind the hood.

The course also includes in depth approach towards any target and increases the scope for mass hunting and success.

 

Here's a more detailed breakdown of the course content: 

In all the sections we will start the fundamental principle of How the scan works and How can we perform Exploitation.

In Introduction, We will cover What is Web, What are Web Servers, DNS and We will also learn about DNS and How DNS works and also How DNS is important in our day to day life.We will also see the difference between URL, URN and URI, We will also see the complete breakdown of URL to understand better

Before starting the journey, We will see Top-10 rules for Bug-Bounty Hunting and we will understand the psychology of the Hackers.

In Shodan for Bug-Bounties we will start with the installation of Shodan and we will learn about Shodan Queries such as Info, Count downloads and many more and will run them from our command line. We will also learn Host Enumeration, Parse dataset, Search Queries, Scan commands using Shodan

In Certificate Transparency for Subdomain Enumeration we will learn about crt[dot]sh, wildcards of crt[dot]sh and We will learn automation for crt[dot]shto enumerate subdomains for a target. We will also learn about Shodan, Censys for Subdomain Enumeration, We will learn about Google and Facebook Certificate Transparency

We will start with Introduction to Fuzzing, Its importance and Step by Step process, We will see fuzzing practically on LAB and LIVE websites to understand better.

We will Learn, Understand and Use tools like Wfuzz and FFUF and also see how we can perform recursive fuzzing on the target. We will also perform HTTP Basic Auth Fuzz to crack the login of the dashboards and also do Login Authentication Cracking with the help of useful wordlists

 

Content Discovery covers tools like Dirsearch, Gobuster which will be helpful for finding out sensitive endpoints of the targets like db.conf or env files which may contain the DB username and passwords. Also sensitive information like periodic backups or source code and can also be identified which can lead to compromise of the whole server

In WAF Identification we will see WAF Detection with Nmap, WAF Fingerprinting with Nmap, WafW00f vs Nmap.

 

Who this course is for

1.  Anybody interested in learning website & web application hacking / penetration testing
2. Any Beginner who wants to start with Penetration Testing
3. Any Beginner who wants to start with Bug Bounty Hunting
4. Trainer who are willing to start teaching Pentesting
5. Any Professional who working in Cyber Security and PentestingEthical
6.  Hackers who wants to learn How OWASP WorksBeginners in Cyber Security Industry for Analyst PositionSOC person who is working into a corporate environment 
7. Developers who wants to fix vulnerabilities and build secure applications

• Requirements

  1. Basic IT Skills
  2. No Linux, programming or hacking knowledge required
  3. Computer with a minimum of 4GB ram/memory & Internet Connection
  4. Operating System: Windows / OS X / Linux 
     

Download Here

 

Join Our Telegram

 

Get Free  Mega Books Collection On Free-Books Page

#FreeCourses#FreeBooks#CyberSec#OffensiveSec#OtherCourses #Microsoft#Azure#Developmental#Virtualization#EthicalHacking#Python#Cisco#Progra