Website Hacking From Scratch
Overview Grasp the science of and how it relates to launching a lucrative career. Prepare for future needs by looking …
5 Students
Overview
Learning Outcomes
- Understand the fundamentals of web technologies and the common vulnerabilities found in web applications.
- Master the use of hacking tools and techniques for ethical penetration testing.
- Identify and exploit vulnerabilities such as SQL injection, XSS, and CSRF.
- Conduct comprehensive vulnerability assessments to enhance web application security.
- Implement effective security measures to protect websites from future attacks.
What Will Make You Stand Out?
On Completion of this Website Hacking From Scratch online course, you’ll acquire:
- CPD QS Accredited Course.
- Upon Course Completion, Earn a Complimentary PDF and a hard copy Certificate to Showcase Your Enhanced Skills.
- Lifetime access.
- 24x7 Tutor Support.
- Complete the course at your own pace.
Description
This course offers a deep dive into the techniques and tools used in website hacking, tailored for beginners with no prior experience. It balances theoretical knowledge with practical tasks, ensuring learners can apply concepts in real-world hacking situations. The curriculum is updated regularly to include the latest security threats and mitigation strategies, making it relevant in the fast-evolving cybersecurity field. Whether you’re looking to secure your own websites or start a career in ethical hacking, this course provides the knowledge and skills you need.
Who is this course for?
Individuals interested in cybersecurity, ethical hacking, or web development, looking to understand website vulnerabilities and learn how to protect against them.
Requirements
A basic understanding of computers and the internet. Access to a computer with an internet connection, capable of running the necessary tools and software for hacking exercises.
Certification
Upon successful completion of the Website Hacking From Scratch course, learners can obtain both a PDF certificate and a Hard copy certificate for completely FREE. The Hard copy certificate is available for a nominal fee of £3.99, which covers the delivery charge within the United Kingdom. Additional delivery charges may apply for orders outside the United Kingdom.
Career Path
- Ethical Hacker
- Penetration Tester
- Security Analyst
- Cybersecurity Consultant
- Web Application Security Specialist
Website Hacking From Scratch Course Reviews
An outstanding online course with clear explanations and practical examples. I could study at my own pace and still feel fully supported throughout. It’s truly boosted my confidence and career prospects
The course was well-structured, engaging, and easy to follow. The flexibility made it perfect alongside my full-time job. I’ve gained valuable, real-world skills that I can apply immediately.
Excellent learning experience from start to finish. The content was professional, up-to-date, and highly relevant. I would highly recommend it to anyone looking to upskill online.
Course Curriculum
| Course Introduction | |||
| Course Introduction | 00:02:00 | ||
| Preparation - Creating a Penetration Testing Lab | |||
| Lab Overview & Needed Software | 00:08:00 | ||
| Installing Kali 2019 As a Virtual Machine Using a Ready Image | 00:10:00 | ||
| Installing Kali 2019 As a Virtual Machine | 00:10:00 | ||
| Installing Metasploitable As a Virtual Machine | 00:04:00 | ||
| Preparation - Linux Basics | |||
| Basic Overview of Kali Linux | 00:05:00 | ||
| The Linux Terminal & Basic Linux Commands | 00:11:00 | ||
| Configuring Metasploitable & Lab Network Settings | 00:06:00 | ||
| Website Basics | |||
| What is a Website? | 00:04:00 | ||
| How To Hack a Website? | 00:04:00 | ||
| Information Gathering | |||
| Gathering Information Using Whois Lookup | 00:05:00 | ||
| Discovering Technologies Used On The Website | 00:06:00 | ||
| Gathering Comprehensive DNS Information | 00:10:00 | ||
| Discovering Websites On The Same Server | 00:04:00 | ||
| Discovering Subdomains | 00:05:00 | ||
| Discovering Sensitive Files | 00:07:00 | ||
| Analysing Discovered Files | 00:04:00 | ||
| Maltego – Discovering Servers, Domains & Files | 00:08:00 | ||
| Maltego – Discovering Websites, Hosting Provider & Emails | 00:05:00 | ||
| File Upload Vulnerabilities | |||
| What are they? And How To Discover & Exploit Basic File Upload Vulnerabilities | 00:07:00 | ||
| HTTP Requests – GET & POST | 00:04:00 | ||
| Intercepting HTTP Requests | 00:07:00 | ||
| Exploiting Advanced File Upload Vulnerabilities | 00:05:00 | ||
| Exploiting More Advanced File Upload Vulnerabilities | 00:04:00 | ||
| [Security] Fixing File Upload Vulnerabilities | 00:06:00 | ||
| Code Execution Vulnerabilities | |||
| What are they? & How To Discover & Exploit Basic Code Execution Vulnerabilities | 00:07:00 | ||
| Exploiting Advanced Code Execution Vulnerabilities | 00:06:00 | ||
| [Security] – Fixing Code Execution Vulnerabilities | 00:06:00 | ||
| Local File Inclusion Vulnerabilities (LFI) | |||
| What are they? And How To Discover & Exploit Them | 00:06:00 | ||
| Gaining Shell Access From LFI Vulnerabilities – Method 1 | 00:07:00 | ||
| Gaining Shell Access From LFI Vulnerabilities – Method 2 | 00:11:00 | ||
| Remote File Inclusion Vulnerabilities (RFI) | |||
| Remote File Inclusion Vulnerabilities – Configuring PHP Settings | 00:04:00 | ||
| Remote File Inclusion Vulnerabilities – Discovery & Exploitation | 00:06:00 | ||
| Exploiting Advanced Remote File Inclusion Vulnerabilities | 00:03:00 | ||
| [Security] Fixing File Inclusion Vulnerabilities | 00:06:00 | ||
| SQL Injection Vulnerabilities | |||
| What is SQL | 00:06:00 | ||
| Dangers of SQL Injections | 00:03:00 | ||
| SQL Injection Vulnerabilities - SQLi In Login Pages | |||
| Discovering SQL Injections In POST | 00:08:00 | ||
| Bypassing Logins Using SQL Injection Vulnerability | 00:05:00 | ||
| Bypassing More Secure Logins Using SQL Injections | 00:06:00 | ||
| [Security] Preventing SQL Injections In Login Pages | 00:08:00 | ||
| SQL Injection Vulnerabilities - Extracting Data From The Database | |||
| Discovering SQL Injections in GET | 00:07:00 | ||
| Reading Database Information | 00:05:00 | ||
| Finding Database Tables | 00:04:00 | ||
| Extracting Sensitive Data Such As Passwords | 00:04:00 | ||
| SQL Injection Vulnerabilities - Advanced Exploitation | |||
| Discovering & Exploiting Blind SQL Injections | 00:06:00 | ||
| Discovering a More Complicated SQL Injection | 00:07:00 | ||
| Extracting Data (passwords) By Exploiting a More Difficult SQL Injection | 00:05:00 | ||
| Bypassing Filters | 00:05:00 | ||
| Bypassing Security & Accessing All Records | 00:09:00 | ||
| [Security] Quick Fix To Prevent SQL Injections | 00:07:00 | ||
| Reading & Writing Files On The Server Using SQL Injection Vulnerability | 00:06:00 | ||
| Getting A Reverse Shell Access & Gaining Full Control Over The Target Web Server | 00:08:00 | ||
| Discovering SQL Injections & Extracting Data Using SQLmap | 00:07:00 | ||
| [Security] – The Right Way To Prevent SQL Injection | 00:05:00 | ||
| XSS Vulnerabilities | |||
| Introduction – What is XSS or Cross Site Scripting? | 00:03:00 | ||
| Discovering Basic Reflected XSS | 00:04:00 | ||
| Discovering Advanced Reflected XSS | 00:05:00 | ||
| Discovering An Even More Advanced Reflected XSS | 00:07:00 | ||
| Discovering Stored XSS | 00:03:00 | ||
| Discovering Advanced Stored XSS | 00:04:00 | ||
| XSS Vulnerabilities - Exploitation | |||
| Hooking Victims To BeEF Using Reflected XSS | 00:06:00 | ||
| Hooking Victims To BeEF Using Stored XSS | 00:04:00 | ||
| BeEF – Interacting With Hooked Victims | 00:04:00 | ||
| BeEF – Running Basic Commands On Victims | 00:04:00 | ||
| BeEF – Stealing Credentials/Passwords Using A Fake Login Prompt | 00:02:00 | ||
| Bonus – Installing Veil 3.1 | 00:06:00 | ||
| Bonus – Veil Overview & Payloads Basics | 00:07:00 | ||
| Bonus – Generating An Undetectable Backdoor Using Veil 3 | 00:10:00 | ||
| Bonus – Listening For Incoming Connections | 00:07:00 | ||
| Bonus – Using A Basic Delivery Method To Test The Backdoor & Hack Windows 10 | 00:07:00 | ||
| BeEF – Gaining Full Control Over Windows Target | 00:04:00 | ||
| [Security] Fixing XSS Vulnerabilities | 00:07:00 | ||
| Insecure Session Management | |||
| Logging In As Admin Without a Password By Manipulating Cookies | 00:06:00 | ||
| Discovering Cross Site Request Forgery Vulnerabilities (CSRF) | 00:07:00 | ||
| Exploiting CSRF Vulnerabilities To Change Admin Password Using a HTML File | 00:07:00 | ||
| Exploiting CSRF Vulnerabilities To Change Admin Password Using Link (Preview) | 00:06:00 | ||
| [Security] The Right Way To Prevent CSRF Vulnerabilities | 00:09:00 | ||
| Brute Force & Dictionary Attacks | |||
| What Are Brute Force & Dictionary Attacks? | 00:04:00 | ||
| Creating a Wordlist | 00:07:00 | ||
| Launching a Wordlist Attack & Guessing Login Password Using Hydra | 00:14:00 | ||
| Discovering Vulnerabilities Automatically Using Owasp ZAP | |||
| Scanning Target Website For Vulnerabilities | 00:04:00 | ||
| Analysing Scan Results | 00:04:00 | ||
| Post Exploitation | |||
| Post Exploitation Introduction | 00:04:00 | ||
| Interacting With The Reverse Shell Access Obtained In Previous Lectures | 00:07:00 | ||
| Escalating Reverse Shell Access To Weevely Shell | 00:08:00 | ||
| Weevely Basics – Accessing Other Websites, Running Shell Commands …etc | 00:07:00 | ||
| Bypassing Limited Privileges & Executing Shell Commands | 00:05:00 | ||
| Downloading Files From Target Webserver | 00:05:00 | ||
| Uploading Files To Target Webserver | 00:08:00 | ||
| Getting a Reverse Connection From Weevely | 00:08:00 | ||
| Accessing The Database | 00:09:00 | ||
Frequently Asked Questions
Yes, Discover Training provides accredited and CPD-certified courses, ensuring learners receive recognised qualifications that support career progression and professional compliance.
Anyone can enrol, including students, professionals, job seekers, career changers, and organisations. Most courses do not require previous experience, making them accessible to learners at all levels.
Discover Training offers courses across multiple sectors, including business, health and safety, compliance, leadership, IT, personal development, and professional skills training.
You will have 14 days to revoke your Course purchase from your purchase date. Regrettably, refunds are not allowed after your purchase have been approved, and materials have been posted to the student’s dashboard or accessed.
Yes, learners receive a downloadable digital certificate upon successful completion, suitable for CPD records, CVs, and professional portfolios.
-
Number of Units:
92 -
Access:
1 Year -
Duration:
9 hours, 17 minutes -
PDF Certificate
Included
