Secuholic's WebHacking Tutorial - part0. Introduce SWT
Introduce
Hello. Welcome To Secuholic's Webhacking Tutorial.
In the past few years, I've been Pen Testing hundreds of websites, reading numerous books and doing google searches. I could find various technical documents and techniques for beginners, but I could not find systematic documents or tutorials.
So, I decided to write a systematic web hacking tutorial that would help both beginners and professionals.
The tutorial will include:
- Basic knowledges :
HTTP Protocol, Proxy, Encoding/Decoding, WEB/WAS/DBMS, etc
- Information Gathering
GoogleDorking, Banner grabbing, PortScan, Sitemap, Spidering, etc
- Basic Web hacking
Injection, Auth and Session, XSS, CSRF, Infomation Exposure, FileUpload/Download, etc
- Advanced Webhacking
XXE, XSRF, NoSQL, ActiveX, HTML5, Templete Injection, Parser, OOB, Deserialize, etc
- Bypass Techniques
Filter Bypass, WAF Bypass, Regex Bypass, etc
- Webhacking Scenario
webshell, SQLinjeciton, XXE, etc
- BugBounty
Bugcrowd, Hackerone, etc
- CTF(capture the flag)
Writeups
Papers
My goal is to post once a week. Starting next week. :)