Early access — first lesson of every course is free6,498 lessons liveLaunch pricing locked for founding membersNo subscription, ever
browse →
CyberCoreSchool
HOME / CATALOG / WEB PENETRATION TESTING & BUG BOUNTY FUNDAMENTALS
EARLY ACCESSLIFETIME ACCESS

— THE LIBRARY — COURSE

Web Penetration Testing & Bug Bounty Fundamentals

Self-paced video training — 19 modules, 94 lessons. Work through it at your own pace — every lesson is real practitioner training, not slide-reading.

19
MODULES
94
LESSONS
1080p
STREAMING
1st
LESSON FREE
▶FREE PREVIEW · COURSE INTRODUCTION
FREE · NO ACCOUNT NEEDEDWATCH NOW →

CURRICULUM

19 modules, in order.

94 LESSONS · LIFETIME ACCESS
01Chapter 11 LESSONS
▶Course IntroductionFREE
02SQL Injection Vulnerabilities2 LESSONS
▶What is SQL
▶Dangers of SQL Injections
03SQL Injection Vulnerabilities - SQLi In Login Pages4 LESSONS
▶Discovering SQL Injections In POST
▶Bypassing Logins Using SQL Injection Vulnerability
▶Bypassing More Secure Logins Using SQL Injections
▶[Security] Preventing SQL Injections In Login Pages
04SQL injection Vulnerabilities - Extracting Data From The Database4 LESSONS
▶Discovering SQL Injections in GET
▶Reading Database Information
▶Finding Database Tables
▶Extracting Sensitive Data Such As Passwords
05SQL injection Vulnerabilities - Advanced Exploitation11 LESSONS
▶Discovering Exploiting Blind SQL Injections
▶Getting a Direct SQL Shell using SQLmap
▶[Security] - The Right Way To Prevent SQL Injection Vulnerabilites
▶Discovering Complex SQL Injection Vulnerabilities
▶Exploiting an advanced SQL Injection Vulnerability to Extract Passwords
▶Bypassing Filters
▶Bypassing Security Accessing All Records
▶[Security] Quick Fix To Prevent SQL Injections
▶Reading Writing Files On The Server Using SQL Injections
▶Getting A Shell Controlling The Target Server Using an SQL Injection
▶Discovering SQL Injections Extracting Data Using SQLmap
06XSS Vulnerabilities6 LESSONS
▶Introduction - What is XSS or Cross Site Scripting
▶Discovering Basic Reflected XSS
▶Discovering Advanced Reflected XSS
▶Discovering An Even More Advanced Reflected XSS
▶Discovering Stored XSS
▶Discovering Advanced Stored XSS
07XSS Vulnerabilities - Exploitation12 LESSONS
▶Hooking Victims To BeEF Using Reflected XSS
▶Bonus - Using A Basic Delivery Method To Test The Backdoor Hack Windows 10
▶Gaining Full Control Over Windows Target
▶[Security] Fixing XSS Vulnerabilities
▶Hooking Victims To BeEF Using Stored XSS
▶Interacting With Hooked Targets
▶Running Basic Commands On Victims
▶Stealing CredentialsPasswords Using A Fake Login Prompt
▶Bonus - Installing Veil Framework
▶Bonus - Veil Overview Payloads Basics
▶Bonus - Generating An Undetectable Backdoor Using Veil 3
▶Bonus - Listening For Incoming Connections
08Insecure Session Management5 LESSONS
▶Logging In As Admin Without a Password By Manipulating Cookies
▶Discovering Cross Site Request Forgery Vulnerabilities (CSRF)
▶Exploiting CSRF To Change Admin Password Using a HTML File
▶Exploiting CSRF Vulnerabilities To Change Admin Password Using Link
▶[Security] The Right Way To Prevent CSRF Vulnerabilities
+ 11 more modules in the full course — 94 lessons total.

CURATED BY

CyberCoreSchool
PRACTITIONER-CURATED LIBRARY

Selected from working practitioners' training libraries and kept whole — modules, labs and walkthroughs exactly as taught.

GOOD TO KNOW

Lessons stream in the browser and remember where you stopped.

Watch on two devices at once — phone, tablet or desktop.

Download buttons are disabled; delivery uses expiring encrypted links.

$249 · ONE PAYMENT

Start with the free lesson.

The first lesson is open to everyone. Buy the course when you are sure — after that it is yours for life.