Information Disclosure Mastery- Hands-on from Zero to Hero!

Information Disclosure Mastery: Hands-on from Zero to Hero!, available at Free, has an average rating of 4.83, with 7 lectures, based on 6 reviews, and has 918 subscribers.

Free Enroll Now

You will learn about information disclosure vulnerabilities information leakage vulnerabilities find information disclosure and leakage vulnerabilities penetration testing bug bounty hunting Walkthrough of all Information Disclosure Apprentice and Practitioner Labs from Portswigger This course is ideal for individuals who are Anybody interested in ethical web application hacking / web application penetration testing or Anybody interested in becoming a web application bug bounty hunter or Anybody interested in learning how hackers hack web applications or Developers looking to expand on their knowledge of vulnerabilities that may impact them or Anyone interested in application security or Anyone interested in Red teaming or Anyone interested in offensive security It is particularly useful for Anybody interested in ethical web application hacking / web application penetration testing or Anybody interested in becoming a web application bug bounty hunter or Anybody interested in learning how hackers hack web applications or Developers looking to expand on their knowledge of vulnerabilities that may impact them or Anyone interested in application security or Anyone interested in Red teaming or Anyone interested in offensive security.

Enroll now: Information Disclosure Mastery: Hands-on from Zero to Hero!

Summary

Title: Information Disclosure Mastery: Hands-on from Zero to Hero!

Price: Free

Average Rating: 4.83

Number of Lectures: 7

Number of Published Lectures: 7

Number of Curriculum Items: 7

Number of Published Curriculum Objects: 7

Original Price: Free

Quality Status: approved

Status: Live

What You Will Learn

information disclosure vulnerabilities

information leakage vulnerabilities

find information disclosure and leakage vulnerabilities

penetration testing

bug bounty hunting

Walkthrough of all Information Disclosure Apprentice and Practitioner Labs from Portswigger

Who Should Attend

Anybody interested in ethical web application hacking / web application penetration testing

Anybody interested in becoming a web application bug bounty hunter

Anybody interested in learning how hackers hack web applications

Developers looking to expand on their knowledge of vulnerabilities that may impact them

Anyone interested in application security

Anyone interested in Red teaming

Anyone interested in offensive security

Target Audiences

Anybody interested in ethical web application hacking / web application penetration testing

Anybody interested in becoming a web application bug bounty hunter

Anybody interested in learning how hackers hack web applications

Developers looking to expand on their knowledge of vulnerabilities that may impact them

Anyone interested in application security

Anyone interested in Red teaming

Anyone interested in offensive security

Welcome to the Information Disclosure Mastery Class – From Zero to Hero!

This class combines both theory and practical hands-on lab experience to find and exploit Information Disclosure vulnerabilities in modern applications (web apps, APIs and mobile).

Important note: This course is NOT teaching the actual usage of Burp Suite and its features. This course is proving a step-by-step walkthrough through the practitioner labs with detailed explanations on how to find and exploit web app vulnerabilities.

Your instructor is Martin Voelk. He is a Cyber Security veteran with 27 years of experience. Martin holds some of the highest certification incl. CISSP, OSCP, OSWP, Portswigger BSCP, CCIE, PCI ISA and PCIP. He works as a consultant for a big tech company and engages in Bug Bounty programs where he found thousands of critical and high vulnerabilities over the years.

This course features all current apprentice and practitioner PortSwigger Web Security Academy lab walk-throughs in the Information Disclosure section. In addition, it features a full theory portion which explains the different types of Information Disclosure vulnerabilities.

Martin is solving all these labs and giving useful insight on how to find and exploit these vulnerabilities. He is not just inserting the payload but explains each step on finding the vulnerability and why it can be exploited in a certain way. The videos are easy to follow along and replicate. Martin is also dropping a lot of tips and tricks for real-world Penetration Testing or Bug Bounty Hunting.

This training is highly recommended for anyone who wants to become a professional in Web Application Penetration Testing, Web Application Bug Bounty Hunting and wants to focus at 1 vulnerability class at a time.

It will feature all Apprentice and Practitioner Labs in the Information Disclosure section.

The theory portion discusses the concepts around:

· Technical Information Disclosure

· Business Information Disclosure

· Encryption / Hashing

· Finding Information Disclosure Vulnerabilities

· Tips & Tricks for real engagements

The lab portion will feature:

· Walkthrough of all Information Disclosure Apprentice and Practitioner Labs from Portswigger

Notes & Disclaimer

Portswigger labs are a public and a free service from Portswigger for anyone to use to sharpen their skills. All you need is to sign up for a free account. I will update this course with new labs as they are published. I will to respond to questions in a reasonable time frame. Learning Web Application Pen Testing / Bug Bounty Hunting is a lengthy process, so please don’t feel frustrated if you don’t find a bug right away. Try to use Google, read Hacker One reports and research each feature in-depth. This course is for educational purposes only. This information is not to be used for malicious exploitation and must only be used on targets you have permission to attack.

Course Curriculum

Chapter 1: Introduction to Information Disclosure Vulnerabilities

Lecture 1: Introduction to Information Disclosure Vulnerabilities

Lecture 2: Setting up Burp

Chapter 2: Information Disclosure Labs

Lecture 1: Information disclosure in error messages

Lecture 2: Information disclosure on debug page

Lecture 3: Source code disclosure via backup files

Lecture 4: Authentication bypass via information disclosure

Lecture 5: Information disclosure in version control history

Instructors

Martin Voelk
Senior IT Security Consultant and Instructor

Rating Distribution

1 stars: 0 votes

2 stars: 0 votes

3 stars: 0 votes

4 stars: 1 votes

5 stars: 5 votes

Frequently Asked Questions

How long do I have access to the course materials?

You can view and review the lecture materials indefinitely, like an on-demand channel.

Can I take my courses with me wherever I go?

Definitely! If you have an internet connection, courses on Udemy are available on any device at any time. If you don’t have an internet connection, some instructors also let their students download course lectures. That’s up to the instructor though, so make sure you get on their good side!