5.00
(5 تقييمات)
eWPTx Prep
عن الدورة
دورة التحضير لشهادة eWPTX المقدمة من INE تعتبر دورة متقدمة ومركزة في مجال اختبار اختراق تطبيقات الويب. تهدف الدورة إلى تعليم مهارات وتقنيات متطورة تمكن المتدرب من اختبار اختراق تطبيقات الويب الحديثة والمعقدة، خاصة تلك التي تعتمد على تقنيات JavaScript وواجهات برمجة التطبيقات (APIs).
تُركز الدورة على تمكين المتدربين من اكتشاف واستغلال الثغرات الأمنية التي قد تكون صعبة الكشف باستخدام الأدوات التقليدية، مما يجعلها مثالية للراغبين في التخصص والاحتراف في مجال اختبار اختراق تطبيقات الويب في بيئات عمل حقيقية ومتطورة.
ماذا سوف تتعلم؟
- Advanced Injection Attack
- API Penetration Testing
- Server Side Attacks
- Filter Evasion & WAF Bypassing
محتوى الدورة
eWAPTXv3 Course Materials
eWAPTXv3 Course Material
Section 1- Intro to Advanced Web Application Penetration Testing
01.1- Intro to Advanced Web Application Penetration Testing – Part 1
32:0001.2- Intro to Advanced Web Application Penetration Testing – Part 2
18:0001.3- Intro to Advanced Web Application Penetration Testing – Part 3
11:0001.4- Intro to Advanced Web Application Penetration Testing – Part 4
14:0001.5- Intro to Advanced Web Application Penetration Testing – Part 5
12:0001.6- Intro to Advanced Web Application Penetration Testing – Part 6
06:0001.7- Intro to Advanced Web Application Penetration Testing – Part 7
13:0001.8- Intro to Advanced Web Application Penetration Testing – Part 7
08:0001.9- Intro to Advanced Web Application Penetration Testing – Part 9
32:0001.10- Intro to Advanced Web Application Penetration Testing – Part 10
09:0001.11- Passive crawling with Burp suite – Part 11 – Lab
10:0001.12- Intro to Advanced Web Application Penetration Testing
10:0001.13- [Bonus Lab] Red Team Engagement
17:0001.14- [Bonus Lab] Nmap Basic port scan
19:0001.15- [Bonus Lab] Nmap Post port scan
22:0001.16- [Bonus Lab] Nmap Advanced port scan
11:0001.17- [Bonus Lab] Nmap Advanced port scan
22:0001.18- [Bonus Lab] Nmap Live Host Discovery
33:0001.19- [Bonus Lab] Red Team Reconnaissance
18:0001.20- [Bonus Lab] Active Reconnaissance
14:0001.21- [Bonus Lab] Passive Reconnaissance
17:0001.22- Scanning Web Application with ZAProxy- Part 21-Lab
18:0001.23- [Bonus Lab] Networking Concepts
43:0001.24- [Bonus Lab] Nmap
38:0001.25- [Bonus Lab] Network Basics
35:0001.26- [Bonus Lab] OWASP Top 10 – 2021
28:0001.27- [Bonus Lab] OWASP Top 10 – 2021
29:0001.28- [Bonus Lab] OWASP Top 10 – 2021
42:00
Section 2- Authentication & Session Management Testing
02.1- Authentication and SSO Attacks – Part 1
21:0002.2- Authentication and SSO Attacks – Part 2
15:0002.3- [Bonus Lab] HTTP in Details
21:0002.4- [Bonus Lab] Networking Concepts
35:0002.5- [Bonus Lab] session management
35:0002.6- Authentication and SSO Attacks – Part 6
18:0002.7- Authentication and SSO Attacks – Part 7
15:0002.8- Authentication and SSO Attacks – Part 8
17:0002.9- Authentication and SSO Attacks – Part 9
16:0002.10- Authentication and SSO Attacks – Part 10
11:0002.11- Authentication and SSO Attacks – Part 11
16:0002.12- Authentication and SSO Attacks – Part 12
14:0002.13- Authentication and SSO Attacks – Part 13
10:0002.14- Authentication and SSO Attacks – Part 14
07:0002.15- Authentication and SSO Attacks – Part 15
08:0002.16- Authentication and SSO Attacks – Part 16
10:0002.17- Authentication and SSO Attacks – Part 17
11:0002.18- Authentication and SSO Attacks – Part 18
11:0002.19 WebGOAT – Lab – Part 19
21:0002.20- [Bonus Lab] challenge room
35:0002.21- Authentication and SSO Attacks – Part 21
07:0002.22- Vulnerable Bank Portal: Dictionary Attack – Part 22
08:0002.23- Authentication and SSO Attacks – Part 23
11:0002.24- Attacking Login Page: Math Captcha – Part 24
28:0002.25- Authentication and SSO Attacks – Part 25
33:0002.26- Authentication and SSO Attacks – Part 26
24:0002.27- Tiki-Wiki Auth Bypass – Part 27
12:0002.29- Authentication and SSO Attacks – Part 29
22:0002.30- Authentication and SSO Attacks – Part 30
11:0002.31- Authentication and SSO Attacks – Part 31
27:0002.32- Vulnerable Bank Portal Improper Session Management – Lab
15:0002.33- Authentication and SSO Attacks – Part 33
29:0002.34- Authentication and SSO Attacks – Part 34
31:0002.35- WebGOAT – Session Fixation – Lab
08:0002.36- Authentication and SSO Attacks – Part 36
26:0002.37- PHP Ticket System – Lab
08:0002.39- Authentication and SSO Attacks – Part 39
45:0002.40- Authentication and SSO Attacks – Part 40
23:0002.41- Authentication and SSO Attacks – Part 41
15:0002.42- Exposed Claim – Lab
06:0002.43- JWT Token Authentication – Lab
23:0002.44- Authentication and SSO Attacks – Part 44
11:0002.45- Authentication and SSO Attacks – Part 45
15:0002.46- Unlimited Attemps – Lab
09:00
Section 3- Advanced Injection Attacks
03.1- Advanced Injection Attacks – Part 1
20:0003.2 – [Bonus Lab] SQL Fundamental
18:0003.3 – [Bonus Lab] SQL Fundamental
25:0003.4- Advanced Injection Attacks – Part 4
25:0003.5- Advanced Injection Attacks
45:0003.6- Advanced Injection Attacks – Part 6
29:0003.7- Advanced Injection Attacks – Part 7
33:0003.8- Advanced Injection Attacks – Part 8
36:0003.9- Advanced Injection Attacks – Part 9
31:0003.10- Advanced Injection Attacks – Part 10
15:0003.11- Advanced Injection Attacks – Part 11
19:0003.12- Advanced Injection Attacks – Part 12
16:0003.13- Advanced Injection Attacks – Part 13
28:0003.14- Advanced Injection Attacks – Part 14
27:0003.15- Advanced Injection Attacks – Part 15
22:0003.16- Advanced Injection Attacks – Part 16
16:0003.17- Advanced Injection Attacks – Part 17
37:0003.18- Advanced Injection Attacks – Part 18
22:0003.19- PHP My Recipes – Lab – Part 19
09:0003.20- Advanced Injection Attacks – Part 20
25:0003.21- Advanced Injection Attacks – Part 21
19:0003.22- Advanced Injection Attacks – Part 22
23:0003.23- Advanced Injection Attacks – Part 23
27:0003.24- Advanced Injection Attacks – Part 24
29:0003.25- Advanced Injection Attacks – Part 25
18:0003.26- Advanced Injection Attacks – Part 26
29:0003.27- Advanced Injection Attacks – Part 27
16:0003.28- Advanced Injection Attacks – Part 28
24:0003.29- Advanced Injection Attacks – Part 29
26:0003.30- Advanced Injection Attacks – Part 30
13:0003.31- Vulnerable Results Portal Union Based SQLi – Lab
13:0003.32 – [Bonus Lab] No SQL Injection – Part 32
23:0003.33 – [Bonus Lab] No SQL Injection – Part 33
17:0003.34 – Victor CMS – Lab
08:0003.35 – CiMe Cites Medicas – Lab
12:0003.36 – Sqlmap Advanced usage – Lab
14:0003.37 – Genix CMS SQLi – Lab
10:0003.38 – MongoDB Basic – Lab
12:0003.39 – MongoDB No SQL Injection – Lab
05:0003.40 – Attacking LDAP – Lab
11:0003.41 – XML Injection – Lab
14:0003.42 – Mutilidiue – Lab
07:0003.43 – [Bonus Lab] SQL injection vulnerability in WHERE clause allowing retrieval of hidden data
11:0003.44 – [Bonus Lab]SQL injection vulnerability allowing login bypass
05:00
Section 4- API Penetration Testing
04.1- API Penetration Testing – Part 1
22:0004.2- API Penetration Testing – Part 2
17:0004.3- API Penetration Testing – Part 3
12:0004.4- API Penetration Testing – Part 4
15:0004.5- API Penetration Testing – Part 5
15:0004.6- API Penetration Testing – Part 6
17:0004.7- API Penetration Testing – Part 7
17:0004.8- API Penetration Testing – Part 8
11:0004.9- API Penetration Testing – Part 9
16:0004.10- API Penetration Testing – Part 10
14:0004.11- API Penetration Testing – Part 11
10:0004.12- API Penetration Testing – Part 12
07:0004.13- API Penetration Testing – Part 13
08:0004.14- API Penetration Testing – Part 14
10:0004.15- API Penetration Testing – Part 15
11:0004.16- API Penetration Testing – Part 16
07:0004.17- API Penetration Testing – Part 17
45:0004.18- API Penetration Testing – Part 18
23:0004.19- API Penetration Testing – Part 19
15:0004.20- API Penetration Testing – Part 20
15:0004.21- API Penetration Testing – Part 21
14:0004.22- API Penetration Testing – Part 22
09:0004.23 – Web servies – Lab
22:0004.24 – Permission Misconfiguration – Lab
22:0004.25 – Improper input validation – Lab
10:0004.26 – Parameter Temparing – Lab
08:0004.27 – [BonusLab] Exploiting an API endpoint using documentation
13:0004.28 – [Bonus Lab] Exploiting server-side parameter pollution in a query string
25:0004.29 – [Bonus Lab ] Finding and exploiting an unused API endpoint
11:0004.30 – [Bonus Lab ] Exploiting a mass assignment vulnerability
11:00
Section 5- Filter Evasion & WAF Bypass Techniques
05.1- Filter Evasion & WAF Bypass Techniques – Part 1
28:0005.2- Filter Evasion & WAF Bypass Techniques – Part 2
14:0005.3- Filter Evasion & WAF Bypass Techniques – Part 3
13:0005.4- Filter Evasion & WAF Bypass Techniques – Part 4
10:0005.5- Filter Evasion & WAF Bypass Techniques – Part 5
11:0005.6- Filter Evasion & WAF Bypass Techniques – Part 6
17:0005.7- Filter Evasion & WAF Bypass Techniques – Part 7
24:0005.8- Filter Evasion & WAF Bypass Techniques – Part 8
15:0005.9- Filter Evasion & WAF Bypass Techniques – Part 9
27:0005.10- Filter Evasion & WAF Bypass Techniques – Part 10
29:0005.11- DVWA – Lab
06:0005.12- Chamilo LMS – Lab
05:0005.13- Squid Browser Based Restriction – Lab
08:00
Section 6- Server-Side Attacks
06.1- Server Side Attacks – Part 1
28:0006.2- Server Side Attacks – Part 2
18:0006.3- Server Side Attacks – Part 3
23:0006.4- Server Side Attacks – Part 4
14:0006.5- Server Side Attacks – Part 5
21:0006.6- Server Side Attacks – Part 6
21:0006.7- Server Side Attacks – Part 7
26:0006.8- Server Side Attacks – Part 8
16:0006.9- Server Side Attacks – Part 9
28:0006.10- Server Side Attacks – Part 10
29:0006.11- Server Side Attacks – Part 11
42:0006.12- Server Side Attacks – Part 12
28:0006.13- Server Side Attacks – Part 13
17:0006.14- Server Side Attacks – Part 14
17:0006.15- Server Side Attacks – Part 15
22:0006.16- Server Side Attacks – Part 16
30:0006.17 – [Bonus Lab] insecure Deserialization – Part 1
25:0006.18 – [Bonus Lab] insecure Deserialization – Part 2
15:0006.19 – SSRF To RCE – Lab – Part 19
23:0006.20 – java insecure Deserelization – Lab – Part 20
12:0006.21 – PHP insecure Deserelization – Lab – Part 21
10:00
CTF – Challenges
1 – Challenge 1
32:002 – Challenge 2
21:003 – Challenge 3
32:004 – Challenge 4
10:005 – Challenge 5
58:006 – Challenge 6
11:00
eWPTXv3 – eXam Details
eWPTXv3 – eXam Details
21:00
جروب الواتساب الخاص بكل النقاشات التي تتعلق بالدوره
رابط جروب الواتساب
احصل على شهادة اتمام الدورة بعد الإنتهاء
أضف هذه الشهادة إلى سيرتك الذاتية لإثبات مهاراتك وزيادة فرصك في الحصول علي وظيفة.
تقييمات ومراجعات الطلاب
5.0
الإجمالي 5 تقييمات
5
التقييمات: 5
4
التقييمات: 0
3
التقييمات: 0
2
التقييمات: 0
1
التقييمات: 0
ماشاء الله شرح الكورس كامل وزيادة
شرح منظم و مفصل بشكل مختصر و ممتع جدا مع محاضرات اضافية كانت مفيدة جدا انا جاي من خلفية ejpt فقط وما واجهت اي مشاكل في فهم الكورس شرح مبدع و موفق جدا
ممتازه
ألشرح جميل ومنظم ماشاء الله ربنا يبارك فيك يا هندسة
المهندس قام بتغطية جميع التفاصيل بدقة، ما شاء الله الشرح كان مناسب جدًا لمستوى الكورس. قام بمراجعة جميع النقاط المهمة مع شرح اللابات، بالإضافة إلى توفير لابات إضافية للتدريب. ربنا يبارك فيه ويجزيه كل خير
