Web Application Basics (Structure, Components)

OWASP Top 10 Vulnerability & Testing Methodology

Burp Suite Advance Usages by installing Plugins

Information Gathering/Recon

Information Gathering/ReconTools Covered- Gobuster, FFUF, WFUZZ, Feroxbuster, gau, Linkfinder, waybackurls, Assetfinder , Subfinder, Amass, httpx,httprobe

Manual Recon : Shodan, whois Lookup, Censys, Nuclei, Arjun Framework

SQL injection vulnerability in WHERE clause allowing retrieval of hidden data

SQL injection vulnerability allowing login bypas

SQL injection UNION attack, determining the number of columns returned by the query

SQL injection UNION attack, finding a column containing text

SQL injection UNION attack, retrieving data from other tables

SQL injection attack, querying the database type and version on Oracle

SQL injection attack, listing the database contents on Oracle

Blind SQL injection with time delays and information retrieval

Blind SQL injection with out-of-band interaction

Reflected XSS into HTML context with nothing encoded

Stored XSS into HTML context with nothing encoded

Reflected XSS into attribute with angle brackets HTML-encoded

Reflected XSS into a JavaScript string with angle brackets HTML encoded

Reflected XSS with some SVG markup allowed

Exploiting XSS to perform CSRF

Reflected DOM XSS

Stored DOM XSS

Basic SSRF against the local server

Basic SSRF against another back-end system

Basic SSRF against the local server

Basic SSRF against another back-end system

SSRF with blacklist-based input filter

SSRF with filter bypass via open redirection vulnerability

Blind SSRF with out-of-band detection

SSRF with whitelist-based input filter

Blind SSRF with Shellshock exploitation

OS command injection, simple case.

Blind OS command injection with time delays

Blind OS command injection with output redirection

Blind OS command injection with out-of-band interaction

Blind OS command injection with out-of-band data exfiltration

File path traversal, traversal sequences blocked with absolute path bypass

File path traversal, traversal sequences stripped non-recursively

File path traversal, traversal sequences stripped with superfluous URL-decode

File path traversal, validation of start of path

File path traversal, validation of file extension with null byte bypass

Username enumeration via different responses

2FA simple bypass

Password reset broken logic

2FA broken logic

Username enumeration via subtly different responses

Username enumeration via response timing

Broken brute-force protection, IP block

Remote code execution via web shell upload.

Web shell upload via Content-Type restriction bypass

Web shell upload via path traversal

Web shell upload via race condition

CORS vulnerability with basic origin reflection

CORS vulnerability with trusted null origin

CSRF where token validation depends on request method

CSRF where token validation depends on token being present

CSRF where token is not tied to user session

CSRF where token is duplicated in cookie

No-Rate Limiting

IDOR

Introduction

Mobile Application Testing set up

OWASP Top 10 of Mobile Application Penetration Testing

Apk File Structure

OSINT Framework

Port Exploitation

Privilege Escalation (Windows & Linux)

Persistence

Process Migrations

Latest CVEs Exploitation

Router Exploitation

Firewall Exploitation

AV Evasion

CTF : Kioptrix level 1-3, Magic

Cloud Penetration Testing Lab set up

OWASP Top 10 Vulnerability for Cloud Securityn

IAM structure

S3 Bucket Structure

Acces Key Token

Secret Key Tokensn

API Pentesting Lab Set up (vAPI & CrAPI)

OWASP Top 10 vulnerability for API

Basic Structure & Functionality of API

REST & SOAP based API