Ecole 42 Professional Training on Cybersecurity
About This Course
The objectives of the course is to leverage on Ecole 42 unique peer-learning model where students learn through collaboration and self-paced progression. By working collaboratively on projects and integrating diverse ideas from their peers, course participants will 'learn to learn' and develop more creative solutions through personal research, exchange with peers, trial and error.
At the basic level, students will review the fundamentals of Cross-Site Scripting (XSS) vulnerabilities, including their types and impacts on web security. Learner will exploit the Cross-Site Scripting (XSS) vulnerability to display cookie contents on the visible page and use their knowledge of Cross-Site Request Forgery (CSRF) to craft and test payloads that exploit the vulnerability in the application. Understanding how Structured Query Language (SQL) Injection vulnerabilities occur and their potential impact on web applications.
At intermediate level, students will apply their knowledge to exploit the template injection vulnerability in the provided web application. Learners will exploit the identified Extensible Markup Language (XML), XML external entity injection (XXE) vulnerability to access and display the contents of the password file. Understanding how Server-Side Request Forgery (SSRF) and Local File Inclusion (LFI) vulnerabilities operate and their impact on web applications.
At the advanced level, students will familiarize themselves with Local File Inclusion (LFI) and Remote Code Execution (RCE) vulnerabilities, understand deserialization vulnerabilities and their implications in cybersecurity, and implement their exploit strategy to demonstrate the deserialization vulnerability effectively.
What You'll Learn
Level 1 - Exploration of multiple vulnerabilities - Cross-Site Scripting (XSS), Cross-Site Request Forgery (CSRF). How to protect against them and how to detect them.
Level 2 - Exploration of multiple vulnerabilities - Tactics, Techniques and Procedures (TTP), Extensible Markup Language (XML) External Entity (XXE), Server-Side Request Forgery (SSRF) + Local File Inclusion (LFI). How to protect against them and how to detect them.
Level 3 - Deserialization with Remote Code Execution (RCE); Padding oracle. How to protect against them and how to detect them.
Entry Requirements
Participants to have moderate technical background with basic knowledge of web programming and terminal.