Ethical Hacking with JavaScript

Master Advanced Techniques for Using JavaScript for Ethical Hacking and Web Application Testing

What you'll learn
- Ethical Hacking techniques based on JavaScript
- Exploiting XSS flaws to inject custom JavaScript
- Tamper with page content, links, forms, and cookies
- Advanced attacks using key loggers and mouse capture
- Use JavaScript to support Spear Phishing efforts
- Combine exploits to retrieve the passwd file
- Learn to use JavaScript to trigger Command Injection attacks against the operating system
- Find out how to move from reflected XXS attacks to employing XSS at scale with persisted attacks
- Exploit account recovery features of an application to collect user secret questions and answers

Requirements
- Basic IT skills
- An interest in learning ethical hacking skills with JavaScript

Description
You've found a XSS vulnerability….but now what?

Has a client ever wanted you to demonstrate the danger of a vulnerability you found for them?

If so, then you need toLearn Ethical Hacking with JavaScript!  After this course, you will be able to exploit web security vulnerabilities by using a variety of skills and techniques centered on JavaScript.

After a quick review of some common web application flaws, we'll jump right into using JavaScript as anoffensiveweapon against the application and clients.

Each topic is presented from the perspective of requiring the pentester to demonstrate how a vulnerability can be exploited and the potential impact of not taking corrective action.  The course provides abalanced mix of theory, code, and live demonstrations of each exploit in action.

Learn to tamper with site content- altering the page, forms, links, and functionality.  Then take it to the next level by abusing HTML forms to capture additional data on form submission, sending that data to a server you control.

See how todisclose the contents of user cookies, then quickly move tostealing the cookiesand sending them to another server.  Learn tosteal credentialsand abuse application authentication.

Further compromise users bycapturing mouse interactionsand implementing acustom key logger.  Learn toabuse knowledge-based authenticationschemes such as the secret question/answer approach for account resets.

Progress to more advanced techniques where you learn tochain together multiple attacksaimed at exploiting several application vulnerabilities simultaneously.  Areas covered here include creating fraudulent forum posts, spear phishing campaigns, and using command injection to access a web server's operating system.

And we'll wrap the course up with somedefensive techniquesyou can use to prevent the types of attacks we've been launching at web applications.

All Ethical Hacking!  All done with JavaScript!

Who this course is for:
- All Levels
More Info