English | MP4 | AVC 1280×720 | AAC 44KHz 2ch | 16 lectures (2h 1m) | 1.12 GB
How to Find, Exploit and Defend Against Command Injection Vulnerabilities. For Ethical Hackers, Developers & Pentesters
Command Injection is a critical security vulnerability that allows an attacker to execute arbitrary operating system commands on the server running the application, often leading to complete remote code execution. Therefore, mastering the ability to identify and exploit command injection vulnerabilities has become an essential and foundational skill.
In this course, we dive into the technical details behind command injection vulnerabilities. We explore methods for detecting these vulnerabilities from both black-box and white-box perspectives, along with various techniques for exploiting them. Moreover, we provide insights into preventive and mitigative measures to safeguard against command injection attacks.
This course goes beyond the basics, offering a well-balanced blend of theoretical knowledge and practical experience! It contains five hands-on labs of varying complexity levels, guiding you through the process of manually exploiting the vulnerability and then scripting and automating your exploits using Python.
By the end of this course, you’ll not only have a solid understanding of command injection vulnerabilities, but also the ability to identify and exploit these vulnerabilities in real-world applications. We’ve designed the course content to be beginner-friendly, so you’ll never feel overwhelmed.
Whether you are a penetration tester, an application security specialist, a bug bounty hunter, a software developer, an ethical hacker, or simply someone intrigued by web application security, this course is for you!
What you’ll learn
- Learn how to find command injection vulnerabilities from a black box and white box perspective.
- Gain hands-on experience exploiting command injection vulnerabilities using Burp Suite Community and Professional editions.
- Learn secure coding practices to prevent and mitigate command injection vulnerabilities.
- Learn how to exploit command injection vulnerabilities of varying difficulty levels.
- Learn how to automate attacks in Python.
Table of Contents
Introduction
1 Course Introduction
Getting help
2 Answering your questions
3 Udemy tips and tricks
Command Injection – Technical Deep Dive
4 Agenda
5 What Is Command Injection
6 How Do You Find Command Injection Vulnerabilities
7 How Do You Exploit Command Injection Vulnerabilities
8 How Do You Defend Against Command Injection Vulnerabilities
9 Resources
Lab Environment Setup
10 Lab Environment Setup
Hands-On Command Injection Labs
11 Lab #1 OS command injection, simple case
12 Lab #2 Blind OS command injection with time delays
13 Lab #3 Blind OS command injection with output redirection
14 Lab #4 Blind OS command injection with out-of-band interaction
15 Lab #5 Blind OS command injection with out-of-band data exfiltration
Bonus Lecture
16 Bonus Lecture
Resolve the captcha to access the links!