Autoplay
Autocomplete
Previous Lesson
Complete and Continue
Learn Ethical Hacking & Reverse Engineering
Section 1: [new] Introduction
1. Introduction (4:04)
2. Registering for an account with defendtheweb.net (1:44)
3. How to use this Guide (3:38)
Section 2: [new] Intro Levels
4. Intro 1 (Client code information leak) (3:28)
5. [NEW] Intro 2 (HTML tag information leak) (3:18)
6. Intro 3 (Javascript code information leak) (10:29)
7. Intro 4 (Path traversal vulnerability) (4:02)
8. Intro 5 (Javascript prompt() function information leak) (2:05)
9. [NEW] Intro 6 (Client code modification vulnerability) (3:50)
10. [NEW] Intro 7 (robots.txt data leak vulnerability) (3:04)
11. Intro 8 (Path traversal vulnerability) (9:41)
12. Intro 9 (Client code modification vulnerability) (3:54)
13. Intro 10 (Javascript code exposure and decryption) (2:52)
14. Intro 11 (File redirection vulnerability) (2:25)
15. Intro 12 (MD5 decryption) (1:31)
Section 3: [new] 24-bit (File extension manipulation exploit)
16. 24-bit (File extension manipulation exploit) (2:49)
Section 4: [new] Word of Peacecraft/Realistic (Dumpster diving for emails)
17. World of Peacecraft/Realistic (Dumpster diving for emails) (3:47)
Section 5: [new] Secure Agent (Browser Spoofing)
18. Secure Agent (Browser Spoofing) (1:55)
Section 6: [new] Crypt1/Crypt (Reverse encryption)
19. Crypt1/Crypt (Reverse encryption) (1:45)
Section 7: [new] Beach (Steganography analyis)
20. Beach (Steganography analyis) (3:31)
Section 8: [new] Squashed image/Stego (Cracking steganography)
21. Squashed image/Stego (Cracking steganography) (1:53)
Section 9: [new] HTTP Method/Intro (HTTP POST exploit & Bypass CSRF-token protection)
22. HTTP Method/Intro (HTTP POST exploit & Bypassing CSRF-token protection) (10:34)
Section 10: [new] Library Gateway/Realistic (Javascript code exposure vulnerability)
23. Library Gateway/Realistic (Javascript code exposure vulnerability) (3:53)
Section 11: [new] Sid/Intro (Cookie tampering to bypass login)
24. Sid/Intro (Cookie tampering to bypass login) (2:17)
Section 12: [new] Crypt2/Crypt (Cracking Caeser Cipher encryption)
25. Crypt2/Crypt (Cracking Caeser Cipher encryption) (2:39)
Section 13: [new] Crypt3/Crypt (Decoding Morse Code)
26. [NEW] Crypt3/Crypt (Decoding Morse Code) (4:49)
Section 14: [new] SQLi1/SQLi (Bypassing login page password using SQL Injection Attack)
27. SQLi1/SQLi (Bypassing login page password using SQL Injection Attack) (7:41)
Section 15: [new] Recon (Information gathering skills, including B6-Key)
28. Recon (Information gathering skills, including B6-Keys) (4:33)
Section 16: [new] Crypt4/Crypt (Decrypting ciphertext using online decryptors)
29. Crypt4/Crypt (Decrypting ciphertext using online decryptors) (2:20)
Section 17: [new] Map It (Portscanning and gaining remote access)
30. Map It (Portscanning and gaining remote access) (4:38)
Section 18: [new] Crypt5/Crypt (Reverse & Decrypt ciphertext using online decryptor)
31. Crypt5/Crypt (Reversing & Decrypting ciphertext using online decryptors) (3:12)
Section 19: [new] SQLi (Hacking admin username & password using SQL Injection Attack)
32. [NEW] SQLi2/SQLi (Hacking admin username & password using SQL Injection Attack) (10:06)
Section 20: [new] Princess Slag/Realistic (Directory traversal & null byte attacks)
33. [NEW] Princess Slag/Realistic (Directory traversal attack & null byte attacks) (7:34)
Section 21: [new] Xmas '08/Realistic (Website defacement attacks)
34. Xmas '08/Realistic (Website defacement attacks) (9:48)
Section 22: [new] Planet Bid/Realistic (Password reminder exploits)
35. Planet Bid/Realistic (Password reminder exploits) (16:11)
Section 23: [new] Access Logs (Log Injection Attack)
36. Access Logs (Log Injection Attack) (4:31)
Section 24: [new] Sandra Murphy (XML Injection Attack)
37. Sandra Murphy (XML Injection Attack) (4:33)
Section 25: [new] Alphabetize/Coding (Using Javascript to defeat countdown timer)
38. Alphabetize/Coding (Using Javascript coding to defeat countdown timer) (10:35)
Section 26: [new] Aliens/Stego (Decoding wav files to extract passwords)
39. Aliens/Stego (Decoding wav files to extract passwords) (7:25)
Section 27: [new] Custom Encoding/Coding (Decryption & hacking website countdown timer)
40. Custom Encoding/Coding (Decryption & hacking website countdown timer) (12:50)
Section 28: [new] Missile codes/Forensics (Analyze & extract data from disk images)
41. Missile codes/Forensics (Analyzing and extracting data from disk images) (19:38)
Section 29: [new] Captcha1/CAPTCHA (Hacking Captcha using OCR and AutoIt)
42. Introduction to Captcha1 challenge (2:51)
43. Downloading and Installing an OCR software (2:07)
44. Using Abby (OCR tool) to convert image to text (2:43)
45. Download and install AutoIt (Automation tool) (2:42)
46. Using AutoIt (21:02)
Section 30: [new] Captcha2/CAPTCHA (Hack Captcha with node.js, imagemagick & AutoIt )
47. Intro to Captcha2 challenge (7:06)
48. Collecting key images (13:39)
49. Splitting the captcha image into 15 sample files (3:21)
50. Installing node.js (2:40)
51. Intro to Node.js (3:46)
52. Using node.js to decode captcha image (10:00)
53. Using AutoIt to defeat countdown timer (10:04)
Section 31: [new] Captcha3/CAPTCHA (Using Python to hack Captcha )
54. Introduction to the Captcha3 challenge (3:14)
55. Installing and Using Python (11:36)
56. Installing Pillow library for Python Image Manipulation (7:27)
57. Collecting key images (17:22)
58. Splitting the captcha3 sample using python (2:34)
59. Creating nodejs script to decode captcha sample images (5:07)
60. Using AutoIt to automate tasks and defeat timer limitation (3:54)
Section 32: Introduction to Software Cracking with crackme's
61. Introduction to crackme's (1:56)
Section 33: Introduction to x64dbg and Detect it Easy (DIE)
62. Downloading and installing x64dbg and Detect It Easy (DIE) (5:22)
Section 34: Setting up your cracking workspace and workflow
63. Setting up your cracking workspace and workflow (11:35)
Section 35: Debugger Stepping Basics
64. Debugger Stepping Basics (26:37)
Section 36 : Stepping Into Calls
65. Stepping Into Calls (19:23)
Section 37 : Breakpoints
66. Breakpoints (6:45)
67. Setting Breakpoints on Strings (10:03)
Section 38 : Reversing Jumps
68. Reversing Jumps (9:21)
Section 39 : How to patch a program
69. How to patch a program (12:25)
70. Patching with Jumps (7:29)
Section 40 : Summary of Cracking Software Workflow
71. The 5 steps of cracking software (4:52)
Section 41 : Introduction to cracking gui-based programs
72. Introduction to cracking gui-based programs (4:01)
Section 42 : Analyzing the PE for a gui-based program
73. Analyzing the PE for a gui-based program (3:42)
Section 43 : Crack the Serial Key using BP on strings
74. Setting up x64dbg (1:35)
75. Crack the Serial Key using BP on strings (8:31)
Section 44 : Windows api functions & the stack
76. Window api functions (6:58)
77. Pushing parameters to the stack (6:49)
Section 45 : Patching to bypass wrong serial key message
78. Patching to bypass wrong serial key message (11:33)
79. Bypassing using xor assembly (10:14)
Section 46 : Bonus Lecture
80. Bonus Lecture (3:35)
27. SQLi1/SQLi (Bypassing login page password using SQL Injection Attack)
Download
Download
21130022-sql-injection-attack.docx
Complete and Continue
Become a Member and Get
Unlimited Access
to 30,000+ Top Cyber Security Courses And Labs.
UPGRADE NOW