In this MOOC, you will learn how to hack web apps with command injection vulnerabilities in a web site of your AWS Linux instance. You will learn how to search valuable information on a typical Linux systems with LAMP services, and deposit and hide Trojans for future exploitation. You will learn how to patch these web apps with input validation using regular expression. You will learn a security design pattern to avoid introducing injection vulnerabilities by input validation and replacing generic system calls with specific function calls. You will learn how to hack web apps with SQL injection vulnerabilities and retrieve user profile information and passwords. You will learn how to patch them with input validation and SQL parameter binding. You will learn the hacking methodology, Nessus tool for scanning vulnerabilities, Kali Linux for penetration testing, and Metasploit Framework for gaining access to vulnerable Windows Systems, deploying keylogger, and perform Remote VNC server injection. You will learn security in memory systems and virtual memory layout, and understand buffer overflow attacks and their defenses. You will learn how to clone a Kali instance with AWS P2 GPU support and perform hashcat password cracking using dictionary attacks and known pattern mask attacks.
Dieser Kurs ist Teil der Spezialisierung Spezialisierung Fundamentals of Computer Network Security
Hacking and Patching
von
8,782 Angemeldet
Lehrplan - Was Sie in diesem Kurs lernen werden
Woche
14 Stunden zum Abschließen
Injection Web App Attacks and Their Defenses
In this module we will learn how to hack web app with command injection vulnerability with only four characters malicious string. We will learn how to hack web app with database backend with SQL injection vulnerability and potentially show the list of passwords by injecting string to overwrite SQL query. We will learn how to perform code review to spot the key statements/their patterns that expose the programs for such injection attacks and learn how to patch them. We will learn how to apply security design pattern to defend injection attacks and enhance web security.
4 Videos (Gesamt 34 min), 2 Lektüren, 2 Quiz
4 Videos
Command Injection11m
Review Code to Detect Pattern to Defend Command Injection12m
Apply Security Design Pattern to Defend Command Injection Attack6m
2 Lektüren
OWASP Command Injection30m
Detecting Command Injection30m
1 praktische Übungen
Exam 3.1. Assessing Injection Web App Attacks and Their Defenses30m
Woche
26 Stunden zum Abschließen
Hack SQL Databases and Patch Web Apps with SQL Injection Vulnerabilities
In this module we will learn how to hack web app with database backend with SQL injection vulnerability and potentially show the list of passwords by injecting string to overwrite SQL query.We will learn how to perform code review to spot the key statements/their patterns that expose the programs for such injection attacks and learn how to patch them. We will learn the eight-step hacker methodology for exploit systems. For the escalating privilege techniques, we show how to leverage command injection vulnerability to search file systems and deposit/hide Trojans for future exploit.
6 Videos (Gesamt 54 min), 5 Lektüren, 2 Quiz
6 Videos
Patching Web App with SQL Injection Vulnerability5m
Hacking Methodology9m
Demystify New OS/PL Will Not Have Injection Vulnerabilities8m
Escalate Privileges via Deploying Trojan10m
Escalate Privileges by Bringing in Sophisticated Trojan8m
5 Lektüren
SQL Injection30m
SQL Injection Prevention Cheat Sheet30m
Red Teaming: The Art of Ethical Hacking30m
Understanding Privilege Escalation30m
National Vulnerability Database Entry30m
1 praktische Übungen
Exam 3.2. Assessing SQL Injection and Hacking Methodology30m
Woche
32 Stunden zum Abschließen
Memory Attacks and Defenses
In this module, we learn about the typical protection mechanism provided by the modern OS to prevent process from accessing other pages data belong different process. We will also learn buffer overflow attacks and their common defenses.
4 Videos (Gesamt 51 min), 2 Lektüren, 1 Quiz
4 Videos
Variables Allocation in Virtual Memory Layout5m
Buffer Overflow14m
Buffer Overflow Defense15m
2 Lektüren
OWASP Memory Leaks30m
OWASP Buffer Overflow Attacks30m
1 praktische Übungen
Exam 3.3. Assessing Buffer Overflow Attacks and Defenses30m
Woche
44 Stunden zum Abschließen
Penetration Testing
In this module we will learn how to perform Vulnerability Scanning with Nessus tool, learn to perform penetration testing using tools included in Kali Linux distribution and to use Metasploit Framework to take control a vulnerable machine, deploy keylogger, run remote shell and remote VNC injection. We will also learn how to clone an AWS P2.xlarge GPU instance from a Ubuntu image with hashcat software to crack passwords.
6 Videos (Gesamt 37 min), 3 Lektüren, 2 Quiz
6 Videos
Vulnerability and WannaCry Ransomware7m
Penetration Testing with Kali Linux6m
Metasploit Framework10m
Keylogging3m
Remote VNC Server Injection1m
3 Lektüren
Nessus Training30m
Kali Linux & Documentation30m
Metasploit Resources30m
1 praktische Übungen
Exam 3.4. Assessing the Scanning and Penetration Testing Skills22m
Dozenten
Edward Chow
ProfessorComputer Science
Über University of Colorado System
The University of Colorado is a recognized leader in higher education on the national and global stage. We collaborate to meet the diverse needs of our students and communities. We promote innovation, encourage discovery and support the extension of knowledge in ways unique to the state of Colorado and beyond.
Über die Spezialisierung Fundamentals of Computer Network Security
This specialization in intended for IT professionals, computer programmers, managers, IT security professionals who like to move up ladder, who are seeking to develop network system security skills. Through four courses, we will cover the Design and Analyze Secure Networked Systems, Develop Secure Programs with Basic Cryptography and Crypto API, Hacking and Patching Web Applications, Perform Penetration Testing, and Secure Networked Systems with Firewall and IDS, which will prepare you to perform tasks as Cyber Security Engineer, IT Security Analyst, and Cyber Security Analyst.
The learning outcomes of this specialization include:
you should be able to create public/private keys, certificate requests, install/sign/verify them for web server and client authentication, secure emails, and code signing.
you should be able to write secure web apps with Crypto API to implement the confidentiality, integrity, and availability basic security services.
you should be able to hack web applications with vulnerabilities and patch them.
you should be able to apply penetration testing tool to exploit vulnerable systems.
you should be able to crack passwords given the hashes in password file using AWS P2 GPU.
you should be able to configure firewall and IDS for secure network systems
you should be able to specify effective security policies and implement efficient enforcement procedures by applying security design principles for securing network systems.
Häufig gestellte Fragen
Wann erhalte ich Zugang zu den Vorträgen und Aufgaben?
Sobald Sie sich für ein Zertifikat angemeldet haben, haben Sie Zugriff auf alle Videos, Quizspiele und Programmieraufgaben (falls zutreffend). Aufgaben, die von anderen Kursteilnehmern bewertet werden, können erst dann eingereicht und überprüft werden, wenn Ihr Unterricht begonnen hat. Wenn Sie sich den Kurs anschauen möchten, ohne ihn zu kaufen, können Sie womöglich auf bestimmte Aufgaben nicht zugreifen.
Was bekomme ich, wenn ich diese Spezialisierung abonniere?
Wenn Sie sich für den Kurs anmelden, erhalten Sie Zugriff auf alle Kurse der Spezialisierung und Sie erhalten nach Abschluss aller Arbeiten ein Zertifikat. Ihr elektronisches Zertifikat wird zu Ihrer Seite „Errungenschaften“ hinzugefügt – von dort können Sie Ihr Zertifikat ausdrucken oder es zu Ihrem LinkedIn Profil hinzufügen. Wenn Sie nur lesen und den Inhalt des Kurses anzeigen möchten, können Sie kostenlos als Gast an dem Kurs teilnehmen.
Wie erfolgen Rückerstattungen?
Ist finanzielle Unterstützung möglich?
Haben Sie weitere Fragen? Besuchen Sie das Hilfe-Center für Teiln..
Coursera arbeitet mit erstklassigen Universitäten und Organisationen zusammen, um Online-Kurse anzubieten und dadurch universellen Zugriff auf die weltweit beste Ausbildung zu ermöglichen.
© 2019 Coursera Inc. Alle Rechte vorbehalten.
