Website Hacking and Protection with Burp Suite
Master Finding Vulnerabilities in Websites
What you'll learn
- Understand how requests are sent from the browser to a website
- Understand the role of Burp Suite in checking website security
- Build a safe testing environment for checking websites
- Tell the free edition from the professional edition
- Get to know the main interface of the program
- Use automated scanning to find weak points
- Understand Burp Suite tools such as the proxy, Repeater and Sequencer
- Use extensions to check website security
- Prepare vulnerability reports to improve protection
About this course
This course introduces the Burp Suite tool in order to check website security and protect websites, and to understand how security vulnerabilities appear so they can be fixed. It starts with an introduction to the course and how requests are sent from the browser to a website, then how the tool helps scan websites for vulnerabilities. After that it explains how to build a safe testing environment, the difference between the free Community edition and the Professional edition, and the main interface of the program. Then it covers automated scanning to discover vulnerabilities, the Target tab, the proxy, the Repeater tool, the Sequencer tool, the comparer tool, and extensions from the Burp Suite store, and finally tips for dealing with different vulnerabilities. The course suits information security enthusiasts, web developers and site administrators who want to protect their sites. It is better to have basic knowledge of how websites work. By the end you will be able to understand vulnerability scan reports and write a report about them to improve the site's protection. The course fits anyone who wants a tool to understand website security from a protection and defense angle only.
Expected outcomes
- Ability to use Burp Suite for efficient penetration testing of websites.
- Understanding data analysis mechanisms and discovering security vulnerabilities.
- Preparing detailed reports on discovered vulnerabilities and how to fix them.
- Learning advanced techniques for data encryption and protection.
- Acquiring skills to professionally manage website security.
Learner reviews
- ★★★★★ISMAIL Z.·منذ 2 شهرشاهد 100٪
perfect course
تم عرض كل التقييمات (1)
Course content
1Website Hacking and Protection Burp Suite
16 lectures
- Introduction to the CourseIntroduces the Burp Suite course for website vulnerability scanning, explaining the difference between its free and paid editions and the purpose of learning it for website security testing.12:51
- Mechanism of Sending from Browser to WebsiteExplains the mechanism of sending a request from the browser to the server and receiving the response, and the difference between GET and POST methods, as a foundation for understanding website scanning.14:48
- How Burp Suite Can Help You Test Website VulnerabilitiesExplains the general idea of how Burp Suite helps scan website vulnerabilities by intercepting requests between the browser and the site, and gives a quick overview of its main tools.14:14
- Building a Penetration Testing EnvironmentExplains setting up a local test environment using XAMPP and the DVWA training application, designed for safely practicing website vulnerability scanning, and solving common installation issues.15:04
- The Difference Between Community and Professional VersionsExplains the difference between the free Community edition and the paid Professional edition of Burp Suite in terms of available tools and vulnerability scanning speed.14:45
- Getting to Know the Basic Program InterfaceExplains the basic Burp Suite interface and its Dashboard sections, including tasks, event logs, and the color-coded severity levels of discovered vulnerabilities.13:44
- Automatically Discovering Vulnerabilities Using Automated ScanningExplains how to start a new automatic scan to check a website's vulnerabilities through crawl and audit options, protocol selection, and defining the target scope.19:32
- How to Direct Discovered Data on the Site Using the Target TabExplains using the Target tab to define the scope of the targeted site and filter discovered data by type and response status, to organize scan results.17:41
- How to Use the Intrusion TabExplains the general concept of the Intruder tool in Burp Suite and its role in testing login forms, as an educational concept for understanding how password protection strength is tested.21:08
- Data Interception Using Proxy Server in ProxyExplains using Burp Suite's Proxy tool to intercept data sent between the browser and the website and analyze the details of requests and responses.21:50
- Data Fragmentation Using Repeater ToolExplains using Burp Suite's Repeater tool to resend and modify a given request repeatedly to observe how the server's response changes, as an analysis step in website scanning.13:10
- Session Capture Using Sequencer ToolExplains the general concept of Burp Suite's Sequencer tool and the Session ID concept in logins, as an educational concept for understanding the importance of session token randomness in session security.17:54
- How to Easily Encrypt and Decrypt Passwords Within the SiteExplains using Burp Suite's Decoder tool to decode and encode text in formats like Base64 and HTML, as a tool for understanding how some sensitive data is stored encoded within websites.8:42
- How to Compare Two Requests in the Browser for Hacking AssistanceExplains using Burp Suite's Comparer tool to compare differences between two requests, and the Logger tool to display a full log of requests and responses with filtering options.13:33
- Extensions to Help You Check Website Vulnerabilities from the Burp Suite StoreExplains Burp Suite's BApp extension store and how to install additional extensions from it to enhance website vulnerability scanning.15:11
- Tips and Tricks to Stand Out in Dealing with Different Website VulnerabilitiesPresents five general tips for working with Burp Suite, such as using keyboard shortcuts and helpful browser extensions, as organizational ideas to streamline vulnerability scanning.18:17
Instructor
Eng. Kanaan Al-Hallaj
This course is part of the diploma
