Ethical Hacking 101: Web App Penetration Testing - a full course for beginners

[@tesfaysimon2727]

⌨️(0:00:00) Setting Up Burp Suite ⌨️(0:08:07) Spidering & DVWA ⌨️(0:19:04) Brute Force Attacks With Burp Suite ⌨️(0:32:55) Target Scope And Spidering ⌨️(0:46:32) Discovering Hidden Files With ZAP ⌨️(1:04:24) Web Application Firewall Detection with WAFW00F ⌨️(1:12:28) DirBuster ⌨️(1:25:27) XSS(Reflected, Stored & DOM) ⌨️(1:41:22) CSRF (Cross Site Request Forgery) ⌨️(2:02:42) Cookie Collection & Reverse Engineering ⌨️(2:14:17) HTTP Attributes (Cookie Stealing) ⌨️(2:27:48) SQL Injection

[@RavindraKumarSG]

thanks

[@faithunitedministries282]

when I set up proxy, I no longer able to use browser. Error: connection not private. How can I get around this to view the video and use burp suite.

[@anonymuser6873]

@@ammarbinfaisal salamu aleikum brother, good explaination. Thank you!

[@gtssenna]

The best comment! Thanks!!

[@vinayjain322]

@@apackalu2718at least he did it for those who don't check description. And it's helpful 😄

[@alexh3143]

I am overwhelmed by the value this channel offers

[@shibafundamentado1837]

this channel is a goldmine of knowledge

[@ShahrinRahman]

Same here.

[@theyellowflash100]

This is from hackersploit, search it up

[@taharehman6439]

NOTE: Anyone who is having trouble with connecting metasploitable with browser in kali 1) go to the metasploitable network settings in your hypervisor( virtual machine monitor or VMM) like virtual box 2) change to the adapter from NAT to Bridge thats all like so more people can see it

[@nathanielahao]

Though bridge gives an easier option to setting the network..but I would prefer you use host network ..it does the same but it has an added advantage..it doesn’t expose your vms to other people on the internet only your host can access them…bridge exposes your vms to other people on the network

[@dhananjaykumar687]

Thinks bro u are great ❤️

[@Fairouznajib]

@@nathanielahaohello, I’m stuck, can we communicate please?

[@PCs454]

no i dont think opening metasploitable as bridged is safe for your home network

[@jerrymartinez4229]

This guy is not only knowledgeable and a good teacher... he's extremely funny too....

[@cryptombt5880]

3 years later and you're still getting views and comments bro. I absolutely love your content. Helps me out a great deal as a beginner in pentesting. Love the subject a great deal

[@vilanstrikegaming5114]

Yes

[@roshanhussain2911]

yes your right

[@EduardoRodrigues-ev7ej]

That's how KZbin works

[@chukwudiudennaka7521]

Please i heard in the video you have a special course about web application penetration testing with ZAp not burp suite. As Zap is being touted as a very massive tool, you can hardly find detailed resources on it. Everyone seems to be talking about Burp suite especially the pro version. So please if you could kindly direct me to the course, I would mostly appreciate it

[@devendrahyalij5724]

I'm watching this nearly after 2 years but it is still much more informative 👍

[@ck4131]

This is really amazing to hear hackersploit voice.

[@GFG96]

Thank you a lot for the content, I appreciate a lot you taking the time to pass your knowledge forward Thank you very much

[@jessicahsmith4815]

hackerlouis05 on Instagram is the best when it comes to hacking He's services are fast and legit and he doesn't charge much

[@omarifinn9987]

sorry to be so offtopic but does anybody know of a tool to log back into an Instagram account?? I was stupid lost my login password. I would appreciate any assistance you can give me

[@johndemlon2375]

the best lesson you need to learn in this tutorial 2:12:25

[@peanutbutter291]

I liked the video as soon as I heard his voice.

[@chanbasha6871]

Excellent teaching man it's very easy to understand ♥️

[@emkt3659]

L

[@InSight0r]

You can skip (2.)Spidering as it's not present in the burpsuite anymore. I think there is something to do with some new laws about crawling but the team is working on a new method implemented in Pro and Community editions with no ETA for now thou.

[@splashkid8410]

How do I find someone ip using their phone number

[@Nick-vd7cg]

Whats the alternative for spidering then? I'm trying to learn copying this guy as a total beginner.

[@frenzyguyz]

Wonderful explanation All doubts cleared and feel confident.

[@nahinalauddin5248]

is it possible for you to create new playlist of cyber security because course is too old and lot have changed

[@shravandhar6169]

This is so helpful. Thanks a ton!

[@antlasgmd1469]

is that video from hackersploit channel cause i heard hackersploit tag in the begening

[@freecodecamp]

Yes. We were so excited that Hackersploit gave us permission to post this great course.

[@younessihem7979]

@@freecodecamp a1

[@jessicahsmith4815]

hackerlouis05 on Instagram is the best when it comes to hacking He's services are fast and legit and he doesn't charge much

[@εύς]

list of tools and applications: dvwa bwapp juice shop owasp zap dirbuster

[@fernandoblazin]

love this guy no nonsense tutorials thanks bro

[@kabandajamir9844]

So nice explanation sir it's really nice the world's best teacher

[@whinrog2646]

pause at 1:25:27 and shake your screen (if you are on your phone).

[@naeem8434]

Amazing I learn a lot from this video thanks for sharing this knowledge with us on KZbin.

[@jayseb]

In the business for a while and was just curious. Well explained and presented. Cheers.

[@ThisIsAli_Off]

As someone in the field, would you advice me to take this course? Is there an important gap between the content of this course and real work or is it very close please? (I am a complete beginner in cybersecurity)

[@Dr_Eam973]

@@ThisIsAli_Off i would like to know this too

[@w花b]

@@ThisIsAli_Off I don't think you can simply watch 2 hours of video and suddenly become a professional. Especially not with computer given the huge amount of things to learn

[@ThisIsAli_Off]

@@w花b Yup, this is especially true for cybersecurity. Every time I think I start "mastering" the basics, I discover a totally new topic that I don't know anything about. It can be very intimidating to start cybersec when you see how large the field is and how hard it is.

[@limazmah1428]

even tho u speak faster but u still one of my best teacher. bless u

[@maxsudik]

I have 2 questions: 1) What is the purpose of setting the proxy? Why we set the proxy to localhost? Using this proxy I'm not able to reach a web resource. 2) I can't select the checkbox in the App, under the 'Proxy' -> 'Options' -> Running 4:59

[@playmaker1011]

Check settings, you can reach everything, proxy is only intercept the request/response

[@ganeshprasad9851]

Proxy servers act as a firewall and web filter, provide shared network connections, and cache data to speed up common requests. People generally use these proxy servers to make the website thing that this ip address didn't visit their site before.

[@guylemay1471]

You don't really know what penetration is until one day you find out that there is a back-door on your system that won't let you in! Hopefully this video will show the way to a better Internet experience!!!

[@lagimmediafiles6478]

I love this org and youtube channel

[@lljw9455]

Thank you, hackersploit! 💕

[@lljw9455]

Stop*

[@TheGeekJourney]

omg! this is an awesome video. 3 hours? yep. the longest video i ever seen.

[@sul3y]

Check out start hacking today

[@Muntwash_Wabant]

Thank you so much Sir !!! You're a great Teacher! Be blessed!

[@CodeXND]

"really really really really really really really really really really " "all good stuff"

[@AP-rv6kk]

irregardless

[@gauravbisht9622]

46:32 timestamp for me

[@mozart0]

It's been 6 months ago..how is it going? Was the information in the video outdated?

[@TheDaha]

@@mozart0 nobody ever rep loss for updates lol

[@chukwudiudennaka7521]

Please during the course, i heard you had a seperate tutorial on the use of ZAp for web applications testing. I ask this because everyone seems to be leaning towards burp suite pro and there are hardly any tutorials out there except yours at least which cover zap in detail for web app pen testing. Please if you would kindly direct me to that tutorial i would appreciate it.

[@MereAYT]

This covers the material clearly and thoroughly. Thanks!

[@ram3252]

This is really helpfull video for us kindly upload video for ethical hacking on desktops application thanks

[@letslearn1712]

You need to have pro version of burpsuite right, mine doesnt have few of the important options like spider and all.

[@tuxmusicman]

I am running Kali in VirtualBox. It does not have a button to add an exception. Firefox was probably updated in the newer Kali. Does anyone know how to create the exception a different way?

[@ajith1804]

I had the same problem.But I installed parrot os,and the problem is solved

[@zyrox347]

You can use an usb for runnig kali linux in your pc :)

[@aussieyobbosworld]

Thank you from Melbourne Australia

[@michaeljumakilongi1146]

nice and recommended indeed bravo work😍

[@r-test3668]

doing this. been wanting this for a long time

[@hashimjaved7416]

This is amazing stuff for beginners. Thank You

[@user-kx1le7yn1k]

"really really really really really really really really really really " "all good stuff"

[@parmeet8455]

Hey Hashim! Do I need to learn anything prior for this course? And where can learn it (paid/free). Thanks

[@hashimjaved7416]

@@parmeet8455 depends on your study background.

[@LoyaltyIsEverything91]

Youre awesome teacher, can you please do a video on how to find the login username and password for a router gateway url? Please and thank you!!

[@Dionydejesus]

Finally ! Something with PARROT OS, There is no books available about parrot os. 😢

[@asmerdam5126]

Thank you so much for this video! I really appreciate, I was referred by Ted, he helped me throughout the whole process with no extra cost. This is my referral as promised mx076 on wickr or telegram.

[@michealsmith9150]

@@asmerdam5126 thanks alot for sharing this!

[@michealjames166]

@@asmerdam5126 just contacted him! hoping for the best

[@vishnusudheer1581]

Thank you Tesfay. Such a great video for study purpose.

[@zimutes]

Strong title, great content.

[@josh9295]

So explanatory. Thanks alot. But can one of these methods be used to bypass otp verification code...If you could do a video on that

[@abovethehorizon2023]

We would love to have an updated version of this course

[@sc0820]

I am wondering if it is only me who see flashes of image, unknown apps, and curse-like jargons without understanding what is the whole picture and the meanings behind all these??

[@theself999]

Yeah i was wondrring the same

[@thanhvinhnguyento7069]

@@theself999 youtube alone won't cut it. Get some books and do research on your own. this is just an overview of some tools

[@evian6673]

@@thanhvinhnguyento7069 Yes indeed.

[@rockguru6656]

0:00 hacker sploit here .. legendary name🔥🔥😎

[@christoferchan3076]

Sick cant wait to dive into this!

[@itamargolomb8530]

Hacker Sploit! Love from Israel!

[@ghostgil7006]

This voice i didn't forget.. :D

[@noahrodriguez4560]

I get the idea! 😅

[@techgirl1148]

hi, thanks for the videos. I have a question at bruteforce. When i go to response/render it shows Unable to render response! Why is this happening? any clue anyone?

[@hu3m4n90]

why so nervous? you do a really nice job explaining bro!

[@janienreeves2813]

Thanks for explaining the difference between the two but I’m new to cyber security I’m wondering which one to do first the pen-testing or vulnerability scanning? Any advise is welcomed as I’m looking for a book camp after I take a couple of online classes

[@kalakotibrahmateja5917]

vulnerability scanning bro

[@croak4046]

What happened to the spider tab in burp suite? It doesn't seem to exist in burp suite 2020.

[@pradipdhakal2665]

I'm going to quite CSGO and start this tutorial from today....

[@aronpop1447]

I recommend English lesson first

[@xitijdesai]

@@aronpop1447 hahah..

[@Nick-vd7cg]

Is it legal to use your website to learn along the way with the video ? By letting Burpsuite at it ?

[@giancarlocerza9159]

thank you so much for this video, makes everything so clear : thank you!

[@utkarshraghav6653]

They have removed spidering option from the community edition now. Any alternatives for this?

[@jchristie6632]

OWASP ZAP has spidering for free. Use this instead

[@notholdini2740]

Yes

[@notholdini2740]

Ok

[@laepiphania25]

Super helpful content...Thanks so much!

[@bugr33d0_hunter8]

The first brute force was admin admin. You were rushing through it. Nice job.

[@Powerfulwordsofbible]

Bro can u tell me the best websites for learning hacking

[@bugr33d0_hunter8]

@@Powerfulwordsofbible depends on what type of hacking you want to learn. Reverse engineering, binary exploitation, Web_app security, Networking security, Systems admin security, Bug_Bounty. Programming in languages like C, Bash, Python are also needed.

[@Powerfulwordsofbible]

@@bugr33d0_hunter8 i want to become an ethical hacker

[@Powerfulwordsofbible]

I'm at beginning stage

[@queefstroganoff2643]

@@Powerfulwordsofbible you need to learn a couple languages before you should do anything else.

[@princealeem7652]

Awesome content and explanation... Got to know so many things

[@aalphaas7719]

Complete TOR anonymity tutorials using TAILS, WHONIX and KODACHI linux kzbin.info/www/bejne/sJjZhp2qpJ19bM0

[@diegomartin9484]

does anyone know what is the url for DVWA??? I know in this video he links it via his IP but i'm not that techy and need to access DVWA using Burp. thanks!

[@Noah-px4dp]

What's the difference between network penetration testing and web application penetration testing? Do you need to know both to be a bug bounty hunter?

[@notholdini2740]

Network penetration is the network like the database the web app penetrations is the application

[@adriankatong3962]

To me the ZAP is more user-friendly sir, becos I follow your other video finding useful information by doing the ZAP spiders

[@charlescena9612]

how great you are man! i salute you. you make me believe!

[@FUFUWO]

The first thing you have to do is learn Proxy Chaining before you try to hack anything. Just a thought

[@rajarshimaitra5310]

Hello guys, I was starting with the tutorial and was really psyched, but hit a bump at the very beginning. After setting my proxy in firefox and importing the Burp certificate, no site is loading in the browser. Failure message is : "Proxy server refusing connection". Here is the same error reported by someone in Burp Support: support.portswigger.net/customer/portal/questions/17353034-error-in-browser-and-burp-suite-the-proxy-server-is-refusing-connections But no solution provided. Can anyone shed some light on how i might get it working? Note: I can see HTTP request intercepted in Burp.

[@pavelpavlenko9892]

I had the same problem. Installing the newest version of Firefox helped me

[@muhammadadnan1430]

I am facing the same problem and hoping if you have found any solution.

[@muhammadadnan1430]

It's saying that the proxy server is refusing the connection on firefox. What should I do now?

[@Danny-iy5oq]

Great video in which you have really given a lot of effort to explain everything in detail. I have a question about the DirBuster is there a way to get a list from a cloud instead of a local computer? regards -- Danny

[@ZorlacSkater]

First of thank you for the great video! I just don't understand why you are using two script at 2:22:40 ?

[@anupamjaiswal7714]

Take a look in JavaScript and html, you'll get it.

[@shivamwagh22]

Just curious, what are the prerequisites to get into this one?

[@slackjaw9963]

Understanding of how the internet works and linux maybe some python js html and css

[@hishaamsummud8586]

could one help please, Burp Suite would not open on a new Parrot security 5.3 installation ; also noticed chrome for Linux after freshly installed is behaving the same way and not starting ?

[@rourodadi7524]

i like your tutorials ...continue please.

[@jackerol4171]

I wish you did the video in a better quality, better for our eyes :)

[@freecodecamp]

KZbin is still processing. Should get better soon.

[@jackerol4171]

@@freecodecamp Thank you! I'll return later to watch it. I look forward to it!

[@MB-eq9ew]

why there is no spider branch on latest version of burp suite

[@buzkings4975]

Hello, how can i get firewall name and version, tried wawoof, but its giving a wrong name. any other way?

[@onen0zednine753]

why didn't this start with a thorough explanation or intro to what web penetration is? it seemed to be more about the tools used and not penetration testing as a discipline... Just a little feedback. who is the target audience for this btw?

[@Dewdrops_101]

He's going straight to the point

[@arsalanirfan4684]

When I changes the preferences to local host then I can't access internet in kali Linux due to which I can't send any http request to any site. Any solution?

[@bugr33d0_hunter8]

Shouldn't use kali then yet. Stick to ubuntu for now. Kali is for elites.

[@raanonyms7926]

loving it, very helpful

[@notholdini2740]

So easy to follow thx

[@happychannel2616]

Please make another more advance course for begginers in web pentesting

[@Amiralsalem2013]

Nice work

[@PristineAnimation]

Thanks Brother .....its very useful to me

[@omosoft2719]

a wesone but knowledge of socket programming in python is a must

[@spyrosdev2533]

If you want to learn to make a port scanner faster than Nmap here it is: kzbin.info/www/bejne/nWiWfZ6saJKAmKM

[@t00manyninjas]

@@spyrosdev2533 that video was removed, have you any links/other vids on the subject?

[@jp-uno]

Being that Burp no longer offers the spidering functionality, What are some of you out there using as an alternative? ZAP?

[@alkixyourlinux9110]

You rock!! Good stuff right here!!!!!

[@smtanvirahammad3219]

really helpful video for bigginer

[@youtubegamer2575]

this better not be illegal i woke up to this video

[@jbntreasure3520]

Hello sir, I would like to know Which programming language would be beneficial for cyber security?

[@anthony-jt2mv]

Python is nice

[@jbntreasure3520]

@@anthony-jt2mv thanks a lot 😀😀😀

[@kavinshah9880]

@@anthony-jt2mv after learning python what is the next step and can u pls explain difference between bug bounty , penetrating, and hacking please bro?

[@HACKPHILES]

Hackersploit😍😍😍

[@gamerstune2895]

Thanks for this ❤

[@mazingerzeta2xx788]

Why I am Missing Spider in my version? currently using v2020.7 i don't see the spider tab?

[@chundurusriharsha2402]

How can i do web app testing for any website given?

[@arisadrian9610]

do the proxy settings have to be the same as the video above

[@XXH-vd7os]

'alert("Awesome content man .. love it")

[@efchiborinaga2014]

Good day! What's the name of the next you've made ? cause I couldn't find it .

[@backpackofficial7]

Do video on mobile app testing (android and IOS )

[@mazenkhallaf4787]

How do we set up the proxy (2:02) using Google Chrome?

[@scottreynolds3569]

by ditching chrome and using ff

[@mazenkhallaf4787]

@@scottreynolds3569 Preferably without ditching (arguably) the worlds best browser.

[@scottreynolds3569]

this will get you to the settings customers.trustedproxies.com/knowledgebase.php?action=displayarticle&id=10 @@mazenkhallaf4787

[@agritech802]

Brilliant, thank you 👍