{"id":167,"date":"2015-06-24T05:44:23","date_gmt":"2015-06-24T05:44:23","guid":{"rendered":"https:\/\/www.armourinfosec.com\/?page_id=167"},"modified":"2022-09-11T21:16:18","modified_gmt":"2022-09-11T15:46:18","slug":"website-security","status":"publish","type":"page","link":"https:\/\/www.armourinfosec.com\/website-security\/","title":{"rendered":"Certified Web Security Expert"},"content":{"rendered":"<section class=\"wpb-content-wrapper\"><p>[vc_row el_class=&#8221;row-this-tabs-kvik&#8221;][vc_column]<div class=\"clearboth\"><\/div><style>#thegem-divider-65a2a1c8bb011 {margin-top: 40px !important;}<\/style><div id=\"thegem-divider-65a2a1c8bb011\" class=\"gem-divider  \" style=\"\" ><\/div>[vc_column_text css_animation=&#8221;top-to-bottom&#8221;]<\/p>\n<p class=\"top-content\">Web\u00a0 Security Testing (WST) is the Security testing techniques for vulnerabilities or security holes in corporate websites and web applications. These vulnerabilities leave websites open to exploitation.<\/p>\n<p class=\"top-content\">Companies now a days are moving their most applications and critical business process on web. Web applications are a major point of vulnerability in organizations today. Web app holes have resulted in the theft of millions of credit cards, major financial and reputational damage for hundreds of enterprises, and even the compromise of thousands of browsing machines that visited Web sites altered by attackers.<\/p>\n<p class=\"top-content\">It is sad but true that many of the advantages that make online applications so convenient, also make them incredibly insecure. As a result, hackers are able to use web applications to penetrate enterprises\u2019 network and access private customer databases. The resulting identity and data theft has become a major concern for corporations and consumers alike.<\/p>\n<p class=\"top-content\">Globally with the rising number of incidents of web defacement, the scope of Web Application penetration Tester is definitely rising. Today Web Application Penetration Testers are in very high demand in software companies, IT security firms, Government and Private Sectors etc.<\/p>\n<p class=\"top-content\"><strong>Scope of web application penetration testing in india:<\/strong><br \/>\nWeb Pen tester, Web security analyst\/consultant, Web Application security analyst<\/p>\n<p>[\/vc_column_text][vc_tta_accordion][vc_tta_section title=&#8221;What are the Objectives of the course ?&#8221; tab_id=&#8221;1635352248378-a36e2396-3a65&#8243;]<div class=\"gem-list gem-list-type-checkbox gem-list-color-5\" ><p>The program begins with introductory-level cybersecurity skills training, then progresses to advanced cybersecurity technologies such as reverse engineering, penetration testing techniques, and many more. This training program will enable you to:<\/p>\n<ul>\n<li>Implement technical strategies, tools, and techniques to secure data and information for your organization.<\/li>\n<li>Adhere to ethical security behaviour for risk analysis and mitigation<\/li>\n<li>Understand security in cloud computing architecture in depth<\/li>\n<li>Comprehend legal requirements, privacy issues and audit process methodologies within the cloud environment<\/li>\n<li>Focus on IT compliance and the integrity of enterprise systems to establish a more secure enterprise IT framework<\/li>\n<li style=\"list-style-type: none;\"><\/li>\n<\/ul>\n<\/div>[\/vc_tta_section][vc_tta_section title=&#8221;What are the Required Skillsets ?&#8221; tab_id=&#8221;1635352248484-d0d9fb03-26fa&#8221;]<div class=\"gem-list gem-list-type-checkbox gem-list-color-5\" ><ul>\n<li>Information security analysts must have strong analytical skills. They have to be able to study computer systems, assess any potential risks, and consider possible solutions.<\/li>\n<li>Creativity is critical for information security analysts. They must be able to anticipate cyber-attacks, always thinking one step ahead of a cyber threat. This kind of forward-thinking takes creativity.<\/li>\n<li>Threats to cybersecurity are always changing, as are solutions. Information security analysts have to constantly update their knowledge on the latest data-protection news, cyber-security legislation, and practices and techniques.<\/li>\n<\/ul>\n<\/div>[\/vc_tta_section][vc_tta_section title=&#8221;What are the career benefits of this training?&#8221; tab_id=&#8221;1635352250526-36827522-609b&#8221;]<div class=\"gem-list gem-list-type-checkbox gem-list-color-5\" ><ul>\n<li>Cybersecurity is vital for career roles such as penetration tester, cybersecurity analyst, network analyst, cybersecurity auditor, cybersecurity architect, forensics investigator, and many more.<\/li>\n<li>There are 2000+ cybersecurity jobs in India and 40,000+ in the US (Indeed.com). Cybersecurity job roles are expected to rise to six million worldwide by 2019.<\/li>\n<li>Expertise your skills in the management side of information security, including topics like governance, program development, and program, incident, and risk management.\n<div class=\"ms-editor-squiggler\"><\/div>\n<\/li>\n<\/ul>\n<\/div>[\/vc_tta_section][\/vc_tta_accordion][\/vc_column][\/vc_row][vc_row full_width=&#8221;stretch_row&#8221; equal_height=&#8221;yes&#8221; css=&#8221;.vc_custom_1483674413225{margin-bottom: 0px !important;}&#8221; el_id=&#8221;details&#8221;][vc_column css=&#8221;.vc_custom_1483213697995{margin-top: 0px !important;}&#8221;][vc_row_inner el_class=&#8221;custom-icon&#8221;][vc_column_inner width=&#8221;1\/2&#8243; offset=&#8221;vc_col-lg-4 vc_col-md-6&#8243;]<div class=\"lazy-loading\" data-ll-item-delay=\"0\"><div class=\"gem-textbox  lazy-loading-item centered-box\"  data-ll-effect=\"move-up\" ><div class=\"gem-textbox-inner\" style=\"\"><div class=\"gem-textbox-content\" style=\"background-color: #f4f6f7;background-position: center top;\"><div class=\"clearboth\"><\/div><style>#thegem-divider-65a2a1c8bb67b {margin-top: 20px !important;}<\/style><div id=\"thegem-divider-65a2a1c8bb67b\" class=\"gem-divider  \" style=\"\" ><\/div>[vc_column_text]<\/p>\n<div class=\"title-h4\" style=\"text-align: center;\">\n<p>Duration<\/p>\n<\/div>\n<p>[\/vc_column_text][vc_single_image image=&#8221;196&#8243; alignment=&#8221;center&#8221;][vc_column_text]<\/p>\n<p style=\"text-align: center;\">2 hours per day x 75 days<\/p>\n<p>[\/vc_column_text]<\/div><\/div><\/div><\/div>[\/vc_column_inner][vc_column_inner width=&#8221;1\/2&#8243; offset=&#8221;vc_col-lg-4 vc_col-md-6&#8243;]<div class=\"lazy-loading\" data-ll-item-delay=\"0\"><div class=\"gem-textbox  lazy-loading-item centered-box\"  data-ll-effect=\"move-up\" ><div class=\"gem-textbox-inner\" style=\"\"><div class=\"gem-textbox-content\" style=\"background-color: #f4f6f7;background-position: center top;\"><div class=\"clearboth\"><\/div><style>#thegem-divider-65a2a1c8bb71c {margin-top: 20px !important;}<\/style><div id=\"thegem-divider-65a2a1c8bb71c\" class=\"gem-divider  \" style=\"\" ><\/div>[vc_column_text]<\/p>\n<div class=\"title-h4\" style=\"text-align: center;\">\n<p>Download Course Syllabus<\/p>\n<\/div>\n<p>[\/vc_column_text][vc_single_image image=&#8221;26229&#8243; alignment=&#8221;center&#8221; onclick=&#8221;custom_link&#8221; link=&#8221;https:\/\/www.armourinfosec.com\/wp-content\/uploads\/2021\/11\/CWSE.pdf&#8221;]<div class=\"clearboth\"><\/div><style>#thegem-divider-65a2a1c8bb736 {margin-top: 25px !important;}<\/style><div id=\"thegem-divider-65a2a1c8bb736\" class=\"gem-divider  \" style=\"\" ><\/div><\/div><\/div><\/div><\/div>[\/vc_column_inner][vc_column_inner offset=&#8221;vc_col-lg-4 vc_col-md-12&#8243;]<div class=\"lazy-loading\" data-ll-item-delay=\"0\"><div class=\"gem-textbox  lazy-loading-item centered-box\"  data-ll-effect=\"move-up\" ><div class=\"gem-textbox-inner\" style=\"\"><div class=\"gem-textbox-content\" style=\"background-color: #f4f6f7;background-position: center top;\"><div class=\"clearboth\"><\/div><style>#thegem-divider-65a2a1c8bb7b3 {margin-top: 20px !important;}<\/style><div id=\"thegem-divider-65a2a1c8bb7b3\" class=\"gem-divider  \" style=\"\" ><\/div>[vc_column_text]<\/p>\n<div class=\"title-h4\" style=\"text-align: center;\"><a href=\"https:\/\/www.armourinfosec.com\/get-an-expert-call-back\/\">Get an Expert Call Back<\/a><\/div>\n<p>[\/vc_column_text][vc_single_image image=&#8221;26359&#8243; alignment=&#8221;center&#8221; onclick=&#8221;custom_link&#8221; link=&#8221;https:\/\/www.armourinfosec.com\/get-an-expert-call-back\/&#8221;][vc_column_text]<\/p>\n<p style=\"text-align: center;\">Send us an Enquiry and we\u2019ll get back to you as soon as possible !!<\/p>\n<p>[\/vc_column_text]<\/div><\/div><\/div><\/div>[\/vc_column_inner][\/vc_row_inner][\/vc_column][\/vc_row][vc_row][vc_column][vc_custom_heading text=&#8221;Secure Development in PHP&#8221; font_container=&#8221;tag:h1|text_align:left&#8221;][vc_column_text]This module, PHP Web Application Security, helps developers to understand security risks, how vulnerabilities can be exploited, and how to avoid those attacks. First, you&#8217;ll learn about how to defend against cross-site scripting, including new approaches such as content security policy. Next, you&#8217;ll learn about how cross-site request forgery works, why it works so well, and how you can implement protection using PHP. Finally, the course will wrap up by teaching you how to protect against SQL injection attacks, covering not only MySQL but also other relevant databases PHP supports.[\/vc_column_text][vc_tta_accordion style=&#8221;flat&#8221; active_section=&#8221;1&#8243; css_animation=&#8221;bottom-to-top&#8221;][vc_tta_section title=&#8221;Module 01: Introduction to PHP&#8221; tab_id=&#8221;1483884010516-4b36ef48-4553&#8243;]<div class=\"gem-list gem-list-type-checkbox gem-list-color-5\" ><ul>\n<li>Introduction to PHP<\/li>\n<\/ul>\n<\/div>[\/vc_tta_section][vc_tta_section title=&#8221;Module 02: PHP Overview&#8221; tab_id=&#8221;1483884462708-26f00b31-4b58&#8243;][vc_row_inner][vc_column_inner width=&#8221;1\/3&#8243;]<div class=\"gem-list gem-list-type-checkbox gem-list-color-5\" ><ul>\n<li>What is PHP<\/li>\n<li>The history of PHP<\/li>\n<\/ul>\n<\/div>[\/vc_column_inner][vc_column_inner width=&#8221;1\/3&#8243;]<div class=\"gem-list gem-list-type-checkbox gem-list-color-5\" ><ul>\n<li>Why choose PHP<\/li>\n<li>Installation overview<\/li>\n<\/ul>\n<\/div>[\/vc_column_inner][vc_column_inner width=&#8221;1\/3&#8243;][\/vc_column_inner][\/vc_row_inner][\/vc_tta_section][vc_tta_section title=&#8221;Module 03: First Steps&#8221; tab_id=&#8221;1483884015108-f060be2a-f278&#8243;][vc_row_inner][vc_column_inner width=&#8221;1\/3&#8243;]<div class=\"gem-list gem-list-type-checkbox gem-list-color-5\" ><ul>\n<li>Embedding PHP code on a page<\/li>\n<li>Outputting dynamic text<\/li>\n<\/ul>\n<\/div>[\/vc_column_inner][vc_column_inner width=&#8221;1\/3&#8243;]<div class=\"gem-list gem-list-type-checkbox gem-list-color-5\" ><ul>\n<li>The operational trail<\/li>\n<li>Inserting code comments<\/li>\n<\/ul>\n<\/div>[\/vc_column_inner][vc_column_inner width=&#8221;1\/3&#8243;][\/vc_column_inner][\/vc_row_inner][\/vc_tta_section][vc_tta_section title=&#8221;Module 04: Exploring Data Types&#8221; tab_id=&#8221;1483884019833-540b3bc6-ad1f&#8221;][vc_row_inner][vc_column_inner width=&#8221;1\/3&#8243;]<div class=\"gem-list gem-list-type-checkbox gem-list-color-5\" ><ul>\n<li>Variables<\/li>\n<li>Strings<\/li>\n<li>String functions<\/li>\n<li>Numbers part one Integers<\/li>\n<\/ul>\n<\/div>[\/vc_column_inner][vc_column_inner width=&#8221;1\/3&#8243;]<div class=\"gem-list gem-list-type-checkbox gem-list-color-5\" ><ul>\n<li>Numbers part two<\/li>\n<li>Floating points<\/li>\n<li>Arrays<\/li>\n<li>Associative arrays<\/li>\n<li>Array functions<\/li>\n<\/ul>\n<\/div>[\/vc_column_inner][vc_column_inner width=&#8221;1\/3&#8243;]<div class=\"gem-list gem-list-type-checkbox gem-list-color-5\" ><ul>\n<li>Booleans<\/li>\n<li>NULL and empty<\/li>\n<li>Type juggling and casting<\/li>\n<li>Constants<\/li>\n<\/ul>\n<\/div>[\/vc_column_inner][\/vc_row_inner][\/vc_tta_section][vc_tta_section title=&#8221;Module 05: Control Structures&#8221; tab_id=&#8221;1483884024571-929db39e-0b61&#8243;][vc_row_inner][vc_column_inner width=&#8221;1\/3&#8243;]<div class=\"gem-list gem-list-type-checkbox gem-list-color-5\" ><p><strong>Logical Expressions<\/strong><\/p>\n<ul>\n<li>If statements<\/li>\n<li>Else and elseif statements<\/li>\n<li>Logical operators<\/li>\n<li>Switch statements<\/li>\n<\/ul>\n<\/div>[\/vc_column_inner][vc_column_inner width=&#8221;1\/3&#8243;]<div class=\"gem-list gem-list-type-checkbox gem-list-color-5\" ><p><strong>Loops<\/strong><\/p>\n<ul>\n<li>While loops<\/li>\n<li>For loops<\/li>\n<li>Foreach loops<\/li>\n<li>Continue<\/li>\n<li>Break<\/li>\n<li>Understanding array pointers<\/li>\n<\/ul>\n<\/div>[\/vc_column_inner][vc_column_inner width=&#8221;1\/3&#8243;][\/vc_column_inner][\/vc_row_inner][\/vc_tta_section][vc_tta_section title=&#8221;Module 06: User-Defined Functions&#8221; tab_id=&#8221;1483884029350-37ec4945-7614&#8243;][vc_row_inner][vc_column_inner width=&#8221;1\/3&#8243;]<div class=\"gem-list gem-list-type-checkbox gem-list-color-5\" ><ul>\n<li>Defining functions<\/li>\n<li>Function arguments<\/li>\n<\/ul>\n<\/div>[\/vc_column_inner][vc_column_inner width=&#8221;1\/3&#8243;]<div class=\"gem-list gem-list-type-checkbox gem-list-color-5\" ><ul>\n<li>Returning values from a function<\/li>\n<li>Multiple return values<\/li>\n<\/ul>\n<\/div>[\/vc_column_inner][vc_column_inner width=&#8221;1\/3&#8243;]<div class=\"gem-list gem-list-type-checkbox gem-list-color-5\" ><ul>\n<li>Scope and global variables<\/li>\n<li>Setting default argument values<\/li>\n<\/ul>\n<\/div>[\/vc_column_inner][\/vc_row_inner][\/vc_tta_section][vc_tta_section title=&#8221;Module 07: Debugging&#8221; tab_id=&#8221;1483884034208-0d9a0b5f-f3d5&#8243;][vc_row_inner][vc_column_inner width=&#8221;1\/3&#8243;]<div class=\"gem-list gem-list-type-checkbox gem-list-color-5\" ><ul>\n<li>Common problems<\/li>\n<\/ul>\n<\/div>[\/vc_column_inner][vc_column_inner width=&#8221;1\/3&#8243;]<div class=\"gem-list gem-list-type-checkbox gem-list-color-5\" ><ul>\n<li>Warnings and errors<\/li>\n<\/ul>\n<\/div>[\/vc_column_inner][vc_column_inner width=&#8221;1\/3&#8243;]<div class=\"gem-list gem-list-type-checkbox gem-list-color-5\" ><ul>\n<li>Debugging and troubleshooting<\/li>\n<\/ul>\n<\/div>[\/vc_column_inner][\/vc_row_inner][\/vc_tta_section][vc_tta_section title=&#8221;Module 08: Building Web Pages with PHP&#8221; tab_id=&#8221;1483884039022-27a296a8-1d3e&#8221;][vc_row_inner][vc_column_inner width=&#8221;1\/3&#8243;]<div class=\"gem-list gem-list-type-checkbox gem-list-color-5\" ><ul>\n<li>Links and URLs<\/li>\n<li>Using GET values<\/li>\n<li>Encoding GET values<\/li>\n<\/ul>\n<\/div>[\/vc_column_inner][vc_column_inner width=&#8221;1\/3&#8243;]<div class=\"gem-list gem-list-type-checkbox gem-list-color-5\" ><ul>\n<li>Encoding for HTML<\/li>\n<li>Including and requiring files<\/li>\n<li>Modifying headers<\/li>\n<\/ul>\n<\/div>[\/vc_column_inner][vc_column_inner width=&#8221;1\/3&#8243;]<div class=\"gem-list gem-list-type-checkbox gem-list-color-5\" ><ul>\n<li>Page redirection<\/li>\n<li>Output buffering<\/li>\n<\/ul>\n<\/div>[\/vc_column_inner][\/vc_row_inner][\/vc_tta_section][vc_tta_section title=&#8221;Module 09: Working with Forms and Form Data&#8221; tab_id=&#8221;1483884043866-e6de01b7-888d&#8221;][vc_row_inner][vc_column_inner width=&#8221;1\/3&#8243;]<div class=\"gem-list gem-list-type-checkbox gem-list-color-5\" ><ul>\n<li>Building forms<\/li>\n<li>Detecting form submissions<\/li>\n<li>Single-page form processing<\/li>\n<\/ul>\n<\/div>[\/vc_column_inner][vc_column_inner width=&#8221;1\/3&#8243;]<div class=\"gem-list gem-list-type-checkbox gem-list-color-5\" ><ul>\n<li>Validating form values<\/li>\n<li>Problems with validation logic<\/li>\n<li>Displaying validation errors<\/li>\n<\/ul>\n<\/div>[\/vc_column_inner][vc_column_inner width=&#8221;1\/3&#8243;]<div class=\"gem-list gem-list-type-checkbox gem-list-color-5\" ><ul>\n<li>Custom validation functions<\/li>\n<li>Single-page form with validations<\/li>\n<\/ul>\n<\/div>[\/vc_column_inner][\/vc_row_inner][\/vc_tta_section][vc_tta_section title=&#8221;Module 10: Working with Cookies and Sessions&#8221; tab_id=&#8221;1483884048812-5619033d-f334&#8243;][vc_row_inner][vc_column_inner width=&#8221;1\/3&#8243;]<div class=\"gem-list gem-list-type-checkbox gem-list-color-5\" ><ul>\n<li>Working with cookies<\/li>\n<li>Setting cookie values<\/li>\n<\/ul>\n<\/div>[\/vc_column_inner][vc_column_inner width=&#8221;1\/3&#8243;]<div class=\"gem-list gem-list-type-checkbox gem-list-color-5\" ><ul>\n<li>Reading cookie values<\/li>\n<li>Unsetting cookie values<\/li>\n<\/ul>\n<\/div>[\/vc_column_inner][vc_column_inner width=&#8221;1\/3&#8243;]<div class=\"gem-list gem-list-type-checkbox gem-list-color-5\" ><ul>\n<li>Working with sessions<\/li>\n<\/ul>\n<\/div>[\/vc_column_inner][\/vc_row_inner][\/vc_tta_section][vc_tta_section title=&#8221;Module 11: MySQL Basics&#8221; tab_id=&#8221;1483885973683-fd4a978b-5ed9&#8243;][vc_row_inner][vc_column_inner width=&#8221;1\/3&#8243;]<div class=\"gem-list gem-list-type-checkbox gem-list-color-5\" ><ul>\n<li>MySQL introduction<\/li>\n<li>Creating a database<\/li>\n<li>Creating a database table<\/li>\n<\/ul>\n<\/div>[\/vc_column_inner][vc_column_inner width=&#8221;1\/3&#8243;]<div class=\"gem-list gem-list-type-checkbox gem-list-color-5\" ><ul>\n<li>CRUD in MySQL<\/li>\n<li>Populating a MySQL database<\/li>\n<\/ul>\n<\/div>[\/vc_column_inner][vc_column_inner width=&#8221;1\/3&#8243;]<div class=\"gem-list gem-list-type-checkbox gem-list-color-5\" ><ul>\n<li>Relational database tables<\/li>\n<li>Populating the relational table<\/li>\n<\/ul>\n<\/div>[\/vc_column_inner][\/vc_row_inner][\/vc_tta_section][vc_tta_section title=&#8221;Module 12: Using PHP to Access MySQL&#8221; tab_id=&#8221;1483886189975-ed82e24f-f3c8&#8243;][vc_row_inner][vc_column_inner width=&#8221;1\/3&#8243;]<div class=\"gem-list gem-list-type-checkbox gem-list-color-5\" ><ul>\n<li>Database APIs in PHP<\/li>\n<li>Connecting to MySQL with PHP<\/li>\n<li>Retrieving data from MySQL<\/li>\n<\/ul>\n<\/div>[\/vc_column_inner][vc_column_inner width=&#8221;1\/3&#8243;]<div class=\"gem-list gem-list-type-checkbox gem-list-color-5\" ><ul>\n<li>Working with retrieved data<\/li>\n<li>Creating records with PHP<\/li>\n<li>Updating and deleting records with PHP<\/li>\n<\/ul>\n<\/div>[\/vc_column_inner][vc_column_inner width=&#8221;1\/3&#8243;]<div class=\"gem-list gem-list-type-checkbox gem-list-color-5\" ><ul>\n<li>SQL injection<\/li>\n<li>Escaping strings for MySQL<\/li>\n<li>Introducing prepared statements<\/li>\n<\/ul>\n<\/div>[\/vc_column_inner][\/vc_row_inner][\/vc_tta_section][vc_tta_section title=&#8221;Module 13: Application CRUD&#8221; tab_id=&#8221;1483886856836-bb2135ae-53c2&#8243;][vc_row_inner][vc_column_inner width=&#8221;1\/3&#8243;]<div class=\"gem-list gem-list-type-checkbox gem-list-color-5\" ><ul>\n<li>Finding a subject in the database<\/li>\n<li>Refactoring the page selection<\/li>\n<li>Creating a new subject form<\/li>\n<li>Processing form values and adding subjects<\/li>\n<\/ul>\n<\/div>[\/vc_column_inner][vc_column_inner width=&#8221;1\/3&#8243;]<div class=\"gem-list gem-list-type-checkbox gem-list-color-5\" ><ul>\n<li>Passing data in the session<\/li>\n<li>Validating form values<\/li>\n<li>Creating an edit subject form<\/li>\n<li>Using single-page submission<\/li>\n<\/ul>\n<\/div>[\/vc_column_inner][vc_column_inner width=&#8221;1\/3&#8243;]<div class=\"gem-list gem-list-type-checkbox gem-list-color-5\" ><ul>\n<li>Deleting a subject<\/li>\n<li>Cleaning up<\/li>\n<li>Assignment Pages CRUD<\/li>\n<li>Assignment results Pages CRUD<\/li>\n<\/ul>\n<\/div>[\/vc_column_inner][\/vc_row_inner][\/vc_tta_section][vc_tta_section title=&#8221;Module 14: Working with Files and Directories&#8221; tab_id=&#8221;1483887532903-e5afa2b0-0ad1&#8243;][vc_row_inner][vc_column_inner width=&#8221;1\/3&#8243;]<div class=\"gem-list gem-list-type-checkbox gem-list-color-5\" ><ul>\n<li>File system basics<\/li>\n<li>Understanding file permissions<\/li>\n<li>Setting file permissions<\/li>\n<li>PHP permissions<\/li>\n<\/ul>\n<\/div>[\/vc_column_inner][vc_column_inner width=&#8221;1\/3&#8243;]<div class=\"gem-list gem-list-type-checkbox gem-list-color-5\" ><ul>\n<li>Accessing files<\/li>\n<li>Writing to files<\/li>\n<li>Deleting files<\/li>\n<li>Moving the file pointer<\/li>\n<\/ul>\n<\/div>[\/vc_column_inner][vc_column_inner width=&#8221;1\/3&#8243;]<div class=\"gem-list gem-list-type-checkbox gem-list-color-5\" ><ul>\n<li>Reading files<\/li>\n<li>Examining file details<\/li>\n<li>Working with directories<\/li>\n<li>Viewing directory content<\/li>\n<\/ul>\n<\/div>[\/vc_column_inner][\/vc_row_inner][\/vc_tta_section][vc_tta_section title=&#8221;Module 15: Sending Emails&#8221; tab_id=&#8221;1483887731439-9cfa8c21-542e&#8221;][vc_row_inner][vc_column_inner width=&#8221;1\/3&#8243;]<div class=\"gem-list gem-list-type-checkbox gem-list-color-5\" ><ul>\n<li>Configuring PHP for email<\/li>\n<li>Sending email with mail()<\/li>\n<\/ul>\n<\/div>[\/vc_column_inner][vc_column_inner width=&#8221;1\/3&#8243;]<div class=\"gem-list gem-list-type-checkbox gem-list-color-5\" ><ul>\n<li>Using headers<\/li>\n<li>Reviewing SMTP<\/li>\n<\/ul>\n<\/div>[\/vc_column_inner][vc_column_inner width=&#8221;1\/3&#8243;]<div class=\"gem-list gem-list-type-checkbox gem-list-color-5\" ><ul>\n<li>Using PHPMailer<\/li>\n<\/ul>\n<\/div>[\/vc_column_inner][\/vc_row_inner][\/vc_tta_section][\/vc_tta_accordion][\/vc_column][\/vc_row][vc_row][vc_column][vc_custom_heading text=&#8221;Web Security&#8221; font_container=&#8221;tag:h1|text_align:left&#8221;][vc_column_text]This module will enable learners to gain knowledge and skills in a series of advanced and current concepts in cyber security, and related to enterprise and infrastructure security. After the completion of this module learners will have a comprehensive understanding of the framework, security controls, networking concepts, traffic analysis, packet analyzers, sniffers, firewalls, SIEM, VLAN, VPN, identity and access management, and much more. The Application and Web Application Security course will enable learners to gain knowledge and skills in OWASP tools and methodologies, insecure deserialization, clickjacking, black box, white box, fuzzing, symmetric\/asymmetric cryptography, hashing, digital signatures, API security, patch management, and much more.[\/vc_column_text][vc_tta_accordion style=&#8221;flat&#8221; active_section=&#8221;1&#8243; css_animation=&#8221;bottom-to-top&#8221;][vc_tta_section title=&#8221;Module 01: Kali Linux Fundamentals&#8221; tab_id=&#8221;1483686504849-f6a2d08a-8826&#8243;][vc_row_inner][vc_column_inner width=&#8221;1\/3&#8243;]<div class=\"gem-list gem-list-type-checkbox gem-list-color-5\" ><ul>\n<li>Kali Linux history and introduction<\/li>\n<li>Kali Linux GUI desktops<\/li>\n<li>Kali Linux Commands<\/li>\n<li>Tar and zips<\/li>\n<li>Compiling programs<\/li>\n<li>Identifying software packages<\/li>\n<li>Installing and removing software<\/li>\n<\/ul>\n<\/div>[\/vc_column_inner][vc_column_inner width=&#8221;1\/3&#8243;]<div class=\"gem-list gem-list-type-checkbox gem-list-color-5\" ><ul>\n<li>User account management<\/li>\n<li>Changing a user account password<\/li>\n<li>Passwd &amp; Shadow file formats<\/li>\n<li>File permissions<\/li>\n<li>Directory permissions<\/li>\n<li>Octal representation<\/li>\n<li>Changing permissions<\/li>\n<\/ul>\n<\/div>[\/vc_column_inner][vc_column_inner width=&#8221;1\/3&#8243;]<div class=\"gem-list gem-list-type-checkbox gem-list-color-5\" ><ul>\n<li>Setting default permissions<\/li>\n<li>Internet addressing<\/li>\n<li>Network services<\/li>\n<li>Commonly available services<\/li>\n<li>Fundamental network configuration files<\/li>\n<li>Network control scripts<\/li>\n<\/ul>\n<\/div>[\/vc_column_inner][\/vc_row_inner][\/vc_tta_section][vc_tta_section title=&#8221;Module 02: Introduction to Penetration Testing &amp; Ethical Hacking&#8221; tab_id=&#8221;1483686505548-fffa2fe1-7900&#8243;][vc_row_inner][vc_column_inner width=&#8221;1\/3&#8243;]<div class=\"gem-list gem-list-type-checkbox gem-list-color-5\" ><p><strong>Hacking Concepts<\/strong><\/p>\n<ul>\n<li>Introduction to Hacking<\/li>\n<li>Hacking vs. Ethical Hacking<\/li>\n<li>Effects of Hacking on Business<\/li>\n<li>Who is a Hacker?<\/li>\n<li>Hacker Classes<\/li>\n<li>Hacktivism<\/li>\n<li>Hacking Phases<\/li>\n<li>Defense in Depth<\/li>\n<\/ul>\n<\/div>[\/vc_column_inner][vc_column_inner width=&#8221;1\/3&#8243;]<div class=\"gem-list gem-list-type-checkbox gem-list-color-5\" ><p><strong>Vulnerability Assessment &amp; Penetration Testing<\/strong><\/p>\n<ul>\n<li>Vulnerabilities<\/li>\n<li>Vulnerability Research<\/li>\n<li>Vulnerability Research Websites<\/li>\n<li>What is Penetration Testing?<\/li>\n<li>Why Penetration Testing<\/li>\n<li>Penetration Testing Methodology<\/li>\n<li>Security Policies<\/li>\n<li>Types of Security Policies<\/li>\n<li>Steps to Create and Implement Security Policies<\/li>\n<\/ul>\n<\/div>[\/vc_column_inner][vc_column_inner width=&#8221;1\/3&#8243;]<div class=\"gem-list gem-list-type-checkbox gem-list-color-5\" ><p><strong>Disaster Recovery &amp; Risk Management<\/strong><\/p>\n<ul>\n<li>Defining Risk Management<\/li>\n<li>Strategies for Managing Risk<\/li>\n<li>How to Analyze Risk<\/li>\n<li>Disaster Recovery Strategies<\/li>\n<li>Plan Testing and Execution<\/li>\n<\/ul>\n<\/div>[\/vc_column_inner][\/vc_row_inner][\/vc_tta_section][vc_tta_section title=&#8221;Module 03: Footprinting and Reconnaissance&#8221; tab_id=&#8221;1483686506192-17b664b8-2f4c&#8221;][vc_row_inner][vc_column_inner width=&#8221;1\/3&#8243;]<div class=\"gem-list gem-list-type-checkbox gem-list-color-5\" ><p><strong>Footprinting Concepts and Methodology<\/strong><\/p>\n<ul>\n<li>Footprinting Terminology<\/li>\n<li>What is Footprinting?<\/li>\n<li>Why Footprinting?<\/li>\n<li>Objectives of Footprinting<\/li>\n<li>Footprinting Threats<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<p><strong>Footprinting using Search Engines<\/strong><\/p>\n<ul>\n<li>Finding Company\u2019s External and Internal URLs<\/li>\n<li>Public and Restricted Websites<\/li>\n<li>Collect Location Information<\/li>\n<li>People Search<\/li>\n<li>People Search Online Services<\/li>\n<li>People Search on Social Networking Services<\/li>\n<li>Gather Information from Financial Services<\/li>\n<li>Footprinting through Job Sites<\/li>\n<li>Monitoring Target Using Alerts<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<p><strong>Website Footprinting<\/strong><\/p>\n<ul>\n<li>Mirroring Entire Website<\/li>\n<li>Website Mirroring Tools<\/li>\n<li>Extract Website Information from http:\/\/www.archive.org<\/li>\n<li>Monitoring Web Updates Using Website Watcher<\/li>\n<\/ul>\n<\/div>[\/vc_column_inner][vc_column_inner width=&#8221;1\/3&#8243;]<div class=\"gem-list gem-list-type-checkbox gem-list-color-5\" ><p><strong>Email Footprinting<\/strong><\/p>\n<ul>\n<li>Tracking Email Communications<\/li>\n<li>Collecting Information from Email Header<\/li>\n<li>Email Tracking Tools<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<p><strong>Footprinting using Google<\/strong><\/p>\n<ul>\n<li>Footprint Using Google Hacking Techniques<\/li>\n<li>What a Hacker can do with Google Hacking?<\/li>\n<li>Google Advance Search Operators<\/li>\n<li>Finding Resources Using Google Advance Operator<\/li>\n<li>Google Hacking Tools<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<p><strong>WHOIS Footprinting<\/strong><\/p>\n<ul>\n<li>WHOIS Lookup<\/li>\n<li>WHOIS Lookup Result Analysis<\/li>\n<li>WHOIS Lookup Tools<\/li>\n<li>WHOIS Lookup Online Tools<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<p><strong>DNS Footprinting<\/strong><\/p>\n<ul>\n<li>Extracting DNS Information<\/li>\n<li>DNS Interrogation Tools<\/li>\n<li>Using Nslookup<\/li>\n<li>Dig for Unix \/ Linux<\/li>\n<\/ul>\n<\/div>[\/vc_column_inner][vc_column_inner width=&#8221;1\/3&#8243;]<div class=\"gem-list gem-list-type-checkbox gem-list-color-5\" ><p><strong>Network Footprinting<\/strong><\/p>\n<ul>\n<li>Locate the Network Range<\/li>\n<li>Determine the Operating System<\/li>\n<li>Traceroute<\/li>\n<li>Traceroute Analysis<\/li>\n<li>Traceroute Tools<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<p><strong>Footprinting using Social Engineering<\/strong><\/p>\n<ul>\n<li>Footprinting through Social Engineering<\/li>\n<li>Collect Information Using Eavesdropping, Shoulder Surfing, and Dumpster Diving<\/li>\n<li>Collect Information through Social Engineering on Social Networking Sites<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<p><strong>Footprinting using Social Networking Sites<\/strong><\/p>\n<ul>\n<li>Collecting Facebook Information<\/li>\n<li>Collecting Twitter Information<\/li>\n<li>Collecting Linkedin Information<\/li>\n<li>Collecting Youtube Information<\/li>\n<li>Tracking Users on Social Networking Sites<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<p><strong>Footprinting Tools<\/strong><\/p>\n<ul>\n<li>Maltego<\/li>\n<li>Domain Name Analyzer Pro<\/li>\n<li>Web Data Extractor<\/li>\n<li>Additional Footprinting Tools<\/li>\n<\/ul>\n<\/div>[\/vc_column_inner][\/vc_row_inner][\/vc_tta_section][vc_tta_section title=&#8221;Module 04: Scanning Networks&#8221; tab_id=&#8221;1483686506848-f05bf1bd-e5eb&#8221;][vc_row_inner][vc_column_inner width=&#8221;1\/3&#8243;]<div class=\"gem-list gem-list-type-checkbox gem-list-color-5\" ><p><strong>Scanning Networks Concepts and Methodology<\/strong><\/p>\n<ul>\n<li>Network Scanning<\/li>\n<li>Scanning Methodology<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<p><strong>Check for Live Systems<\/strong><\/p>\n<ul>\n<li>ICMP Scanning<\/li>\n<li>Ping Sweep<\/li>\n<li>Ping Sweep Tools<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<p><strong>Banner Grabbing<\/strong><\/p>\n<ul>\n<li>Banner Grabbing Tools<\/li>\n<li>Banner Grabbing Countermeasures: Disabling or Changing Banner<\/li>\n<li>Hiding File Extensions from Web Pages<\/li>\n<\/ul>\n<\/div>[\/vc_column_inner][vc_column_inner width=&#8221;1\/3&#8243;]<div class=\"gem-list gem-list-type-checkbox gem-list-color-5\" ><p><strong>Check for Open Ports<\/strong><\/p>\n<ul>\n<li>Three-Way Handshake<\/li>\n<li>TCP Communication Flags<\/li>\n<li>Create Custom Packet Using TCP Flags<\/li>\n<li>Scanning IPv6 Network<\/li>\n<li>Scanning Tool<\/li>\n<li>Hping2 \/ Hping3<\/li>\n<li>Hping Commands<\/li>\n<li>Scanning Techniques<\/li>\n<li>Nmap<\/li>\n<li>TCP Connect \/ Full Open Scan<\/li>\n<li>Stealth Scan (Half-open Scan)<\/li>\n<li>Xmas Scan<\/li>\n<li>FIN Scan<\/li>\n<li>NULL Scan<\/li>\n<li>IDLE Scan<\/li>\n<li>ICMP Echo Scanning\/List Scan<\/li>\n<li>UDP Scanning<\/li>\n<li>Inverse TCP Flag Scanning<\/li>\n<li>ACK Flag Scanning<\/li>\n<\/ul>\n<\/div>[\/vc_column_inner][vc_column_inner width=&#8221;1\/3&#8243;]<div class=\"gem-list gem-list-type-checkbox gem-list-color-5\" ><p><strong>Scanning Beyond IDS<\/strong><\/p>\n<ul>\n<li>IDS Evasion Techniques<\/li>\n<li>SYN\/FIN Scanning Using IP Fragments<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<p><strong>Scan for Vulnerability<\/strong><\/p>\n<ul>\n<li>Security Alerts<\/li>\n<li>Vulnerability Scanning<\/li>\n<li>Vulnerability Scanning Tool<\/li>\n<li>IBM Appscan<\/li>\n<li>GFI Languard<\/li>\n<li>Network Vulnerability Scanners<\/li>\n<li>Analyzing the Scan Results<\/li>\n<li>Generating Reports<\/li>\n<li>Remediation<\/li>\n<li>Patch Management<\/li>\n<\/ul>\n<\/div>[\/vc_column_inner][\/vc_row_inner][\/vc_tta_section][vc_tta_section title=&#8221;Module 05: Social Engineering&#8221; tab_id=&#8221;1483686510810-f98ee7dd-d0aa&#8221;][vc_row_inner][vc_column_inner width=&#8221;1\/3&#8243;]<div class=\"gem-list gem-list-type-checkbox gem-list-color-5\" ><p><strong>Social Engineering Concepts<\/strong><\/p>\n<ul>\n<li>What is Social Engineering?<\/li>\n<li>Behaviors Vulnerable to Attacks<\/li>\n<li>Factors that Make Companies Vulnerable to Attacks<\/li>\n<li>Why Is Social Engineering Effective?<\/li>\n<li>Warning Signs of an Attack<\/li>\n<li>Phases in a Social Engineering Attack<\/li>\n<li>Impact on the Organization<\/li>\n<li>\u201cRebecca\u201d and \u201cJessica\u201d<\/li>\n<li>Common Targets of Social Engineering<\/li>\n<\/ul>\n<\/div>[\/vc_column_inner][vc_column_inner width=&#8221;1\/3&#8243;]<div class=\"gem-list gem-list-type-checkbox gem-list-color-5\" ><p><strong>Social Engineering Techniques<\/strong><\/p>\n<ul>\n<li>Introduction of Social Engineering<\/li>\n<li>Types of Social Engineering<\/li>\n<li>Human-based Social Engineering<\/li>\n<li>Technical Support<\/li>\n<li>Authority Support<\/li>\n<li>Human base<\/li>\n<li>Human base: Eavesdropping and Shoulder Surfing<\/li>\n<li>Human base: Dumpster Diving<\/li>\n<li>Computer based Attacks<\/li>\n<li>Computer based Attacks: Pop-Ups<\/li>\n<li>Computer based Attacks: Phishing<\/li>\n<li>Computer based Attacks: Spear Phishing<\/li>\n<li>Computer based Attacks: Using Social Media<\/li>\n<\/ul>\n<\/div>[\/vc_column_inner][vc_column_inner width=&#8221;1\/3&#8243;]<div class=\"gem-list gem-list-type-checkbox gem-list-color-5\" ><ul>\n<li>Mobile based<\/li>\n<li>Mobile based: Publishing Malicious Apps<\/li>\n<li>Mobile based: Repackaging Legitimate Apps<\/li>\n<li>Mobile based: Fake Security Applications<\/li>\n<li>Mobile based: Using SMS<\/li>\n<li>Insider Attack<\/li>\n<li>Disgruntled Employee<\/li>\n<li>Preventing Insider Threats<\/li>\n<li>How to Detect Phishing Emails<\/li>\n<li>Anti-Phishing Toolbar: Netcraft<\/li>\n<li>Anti-Phishing Toolbar: PhishTank<\/li>\n<li>Identity Theft<\/li>\n<\/ul>\n<\/div>[\/vc_column_inner][\/vc_row_inner][\/vc_tta_section][vc_tta_section title=&#8221;Module 06: Denial of Service&#8221; tab_id=&#8221;1483688290607-09e380f7-fca2&#8243;][vc_row_inner][vc_column_inner width=&#8221;1\/3&#8243;]<div class=\"gem-list gem-list-type-checkbox gem-list-color-5\" ><p><strong>DoS\/DDoS Concepts<\/strong><\/p>\n<ul>\n<li>What is a Denial of Service Attack?<\/li>\n<li>What are Distributed Denial of Service Attacks?<\/li>\n<li>How Distributed Denial of Service Attacks Work<\/li>\n<li>Symptoms of a DoS Attack<\/li>\n<li>Cyber Criminals<\/li>\n<li>Organized Cyber Crime: Organizational Chart<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<p><strong>DoS Attack Techniques<\/strong><\/p>\n<ul>\n<li>Bandwidth Attacks<\/li>\n<li>Service Request Floods<\/li>\n<li>SYN Attack<\/li>\n<li>SYN Flooding<\/li>\n<li>ICMP Flood Attack<\/li>\n<li>Peer-to-Peer Attacks<\/li>\n<li>Permanent Denial-of-Service Attack<\/li>\n<li>Application Level Flood Attacks<\/li>\n<\/ul>\n<\/div>[\/vc_column_inner][vc_column_inner width=&#8221;1\/3&#8243;]<div class=\"gem-list gem-list-type-checkbox gem-list-color-5\" ><p><strong>Botnet<\/strong><\/p>\n<ul>\n<li>Botnet Propagation Technique<\/li>\n<li>Botnet Ecosystem<\/li>\n<li>Botnet Trojan: Shark<\/li>\n<li>Poison Ivy: Botnet Command Control Center<\/li>\n<li>Botnet Trojan: PlugBot<\/li>\n<li>Botnet Trojans: Illusion Bot and NetBot Attacker<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<p><strong>DDoS Case Study<\/strong><\/p>\n<ul>\n<li>DDoS Attack<\/li>\n<li>DDoS Attack Tool: LOIC<\/li>\n<li>Hackers Advertise Links to Download Botnet<\/li>\n<li>DoS Attack Tools<\/li>\n<\/ul>\n<\/div>[\/vc_column_inner][vc_column_inner width=&#8221;1\/3&#8243;]<div class=\"gem-list gem-list-type-checkbox gem-list-color-5\" ><p><strong>Denial of Service Attack Detection Techniques<\/strong><\/p>\n<ul>\n<li>Activity Profiling<\/li>\n<li>Wavelet Analysis<\/li>\n<li>Sequential Change-Point Detection<\/li>\n<li>Post-Attack Forensics<\/li>\n<li>Techniques to Defend against Botnets<\/li>\n<li>DoS\/DDoS Protection at ISP Level<\/li>\n<li>Enabling TCP Intercept on Cisco IOS Software<\/li>\n<li>Advanced DDoS Protection Appliances<\/li>\n<\/ul>\n<\/div>[\/vc_column_inner][\/vc_row_inner][\/vc_tta_section][vc_tta_section title=&#8221;Module 07: Session Hijacking&#8221; tab_id=&#8221;1483688379082-b230ce43-cfd5&#8243;][vc_row_inner][vc_column_inner width=&#8221;1\/3&#8243;]<div class=\"gem-list gem-list-type-checkbox gem-list-color-5\" ><p><strong>Session Hijacking Concepts<\/strong><\/p>\n<ul>\n<li>What is Session Hijacking?<\/li>\n<li>Why Session Hijacking is Successful?<\/li>\n<li>Key Session Hijacking Techniques<\/li>\n<li>Brute Forcing Attack<\/li>\n<li>Spoofing vs. Hijacking<\/li>\n<li>Session Hijacking Process<\/li>\n<li>Types of Session Hijacking<\/li>\n<li>Attack Vectors<\/li>\n<li>The Impact of Session Hijacking<\/li>\n<li>Session Hijacking and the OWASP Top 10<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<p><strong>Session Hijacking in Web Applications<\/strong><\/p>\n<ul>\n<li>The Stateless Nature of HTTP<\/li>\n<li>Persisting State Over HTTP<\/li>\n<li>Session Persistence in Cookies<\/li>\n<li>Session Persistence in the URL<\/li>\n<li>Session Persistence in Hidden Form Fields<\/li>\n<li>Hijacking Sessions in Web Applications<\/li>\n<li>Hijacking Cookies with Cross Site Scripting<\/li>\n<li>Exposed Cookie Based Session IDs in Logs<\/li>\n<li>Exposed URL Based Session IDs in Logs<\/li>\n<li>Leaking URL Persisted Sessions in the Referrer<\/li>\n<li>Session Sniffing<\/li>\n<li>Session Fixation<\/li>\n<li>Brute Forcing Session IDs<\/li>\n<li>Session Donation<\/li>\n<\/ul>\n<\/div>[\/vc_column_inner][vc_column_inner width=&#8221;1\/3&#8243;]<div class=\"gem-list gem-list-type-checkbox gem-list-color-5\" ><p><strong>Session Hijacking in Network and Client Level<\/strong><\/p>\n<ul>\n<li>Understanding TCP<\/li>\n<li>Reviewing the Three-way Handshake in Wireshark<\/li>\n<li>Generation and Predictability of TCP Sequence Numbers<\/li>\n<li>Blind Hijacking<\/li>\n<li>Man in the Middle Session Sniffing<\/li>\n<li>IP Spoofing<\/li>\n<li>UDP Hijacking<\/li>\n<li>Man in the Browser Attacks<\/li>\n<li>Network Level Session Hijacking in the Wild<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<p><strong>Mitigating the Risk of Session Hijacking<\/strong><\/p>\n<ul>\n<li>Use Strong Session IDs<\/li>\n<li>Keep Session IDs Out of the URL<\/li>\n<li>Don\u2019t Reuse Session ID for Auth<\/li>\n<li>Always Flag Session ID Cookies as HTTP Only<\/li>\n<li>Use Transport Layer Security<\/li>\n<li>Always Flag Session ID Cookies as Secure<\/li>\n<li>Session Expiration and Using Session Cookies<\/li>\n<li>Consider Disabling Sliding Sessions<\/li>\n<li>Encourage Users to Log Out<\/li>\n<li>Re-authenticate Before Key Actions<\/li>\n<\/ul>\n<\/div>[\/vc_column_inner][vc_column_inner width=&#8221;1\/3&#8243;]<div class=\"gem-list gem-list-type-checkbox gem-list-color-5\" ><p><strong>Automating Session Hijack Attacks<\/strong><\/p>\n<ul>\n<li>Manipulating Session IDs with OWASP ZAP<\/li>\n<li>Testing Session Token Strength with Burp Suite<\/li>\n<li>Dynamic Analysis Testing with NetSparker<\/li>\n<li>Other Tools<strong><br \/>\n<\/strong><\/li>\n<\/ul>\n<\/div>[\/vc_column_inner][\/vc_row_inner][\/vc_tta_section][vc_tta_section title=&#8221;Module 08: Advanced Exploitation Techniques&#8221; tab_id=&#8221;1483688667592-0678dc9b-f068&#8243;][vc_row_inner][vc_column_inner width=&#8221;1\/3&#8243;]<div class=\"gem-list gem-list-type-checkbox gem-list-color-5\" ><p><strong>Introduction &amp; fundamentals of Metasploit<\/strong><\/p>\n<ul>\n<li>Terminologies and Requirement of Metasploit<\/li>\n<li>Metasploit Architecture<\/li>\n<li>Mixins and Plugins<\/li>\n<li>Msfconsole<\/li>\n<li>Exploits in Metasploit<\/li>\n<li>Important commands for Exploits usage<\/li>\n<li>Payload Basics<\/li>\n<li>Generating Different Payloads<\/li>\n<li>Database in Metasploit<\/li>\n<li>Meterpreter in Metasploit<\/li>\n<li>Meterpreter usage in Metasploit<\/li>\n<\/ul>\n<\/div>[\/vc_column_inner][vc_column_inner width=&#8221;1\/3&#8243;]<div class=\"gem-list gem-list-type-checkbox gem-list-color-5\" ><p><strong>Information Gathering &amp; Vulnerability scanning<\/strong> <strong>via Metasploit<\/strong><\/p>\n<ul>\n<li>Port scanning with Metasploit<\/li>\n<li>Target mssql<\/li>\n<li>Service information via Metasploit<\/li>\n<li>SNMP sniffing<\/li>\n<li>Psnuffel script in Metasploit<\/li>\n<li>Custom scanner by user<\/li>\n<li>SMB Login Check Scanner<\/li>\n<li>Open VNC server scanning<\/li>\n<li>WMAP web scanner in Metasploit<\/li>\n<li>NeXpose scanner via Metasploit<\/li>\n<li>Nessus usage and Metasploit<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<p><strong>Exploit-payload Creation<\/strong><\/p>\n<ul>\n<li>Design Goals for an Exploit<\/li>\n<li>mixins in exploit writing<\/li>\n<li>Msfvenom<\/li>\n<li>AN Shellcode<\/li>\n<\/ul>\n<\/div>[\/vc_column_inner][vc_column_inner width=&#8221;1\/3&#8243;]<div class=\"gem-list gem-list-type-checkbox gem-list-color-5\" ><p><strong>Client side Attacks<\/strong><\/p>\n<ul>\n<li>Binary Payloads<\/li>\n<li>Trojans for linux via Metasploit<\/li>\n<li>Malicious PDF file via Metasploit<\/li>\n<li>After exploitation stuff<\/li>\n<li>Privilege Escalation<\/li>\n<li>Pass the hash attack<\/li>\n<li>Session stealing attacks<\/li>\n<li>Registry and backdoors in Metsploit<\/li>\n<li>Packet sniffing with Metasploit<\/li>\n<li>Bypassing the forensic investigation<\/li>\n<li>Monitoring and searching the victim<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<p><strong>Scripts, Meterpreter and Ruby extension<\/strong><\/p>\n<ul>\n<li>Automation of Meterpreter via rc scripts<\/li>\n<li>Irb shell programming in Meterpreter<\/li>\n<li>Backdooring the remote system<\/li>\n<li>Keylogging the remote system<\/li>\n<li>Metsvc exploitation<\/li>\n<li>Persistence exploitation services<\/li>\n<\/ul>\n<\/div>[\/vc_column_inner][\/vc_row_inner][\/vc_tta_section][vc_tta_section title=&#8221;Module 09: Hacking Web servers&#8221; tab_id=&#8221;1483688525617-54d8c0f3-caca&#8221;][vc_row_inner][vc_column_inner width=&#8221;1\/3&#8243;]<div class=\"gem-list gem-list-type-checkbox gem-list-color-5\" ><p><strong>Web server Concepts<\/strong><\/p>\n<ul>\n<li>Web server Market Shares<\/li>\n<li>Open Source Web server Architecture<\/li>\n<li>IIS Web server Architecture<\/li>\n<li>Understanding How Web Servers Are Hacked<\/li>\n<li>The Impact of Hacking<\/li>\n<li>Web Servers versus Web Applications<\/li>\n<li>The Role of Cloud<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<p><strong>Discovering Risks &amp; Misconfiguration in Web Servers<\/strong><\/p>\n<ul>\n<li>Crawling, Enumeration, and Directory Traversal<\/li>\n<li>Mirroring Websites<\/li>\n<li>Reconnaissance and Footprinting<\/li>\n<li>HTTP Fingerprinting<\/li>\n<li>Social Engineering<\/li>\n<li>Internal Leakage<\/li>\n<li>Debug Settings<\/li>\n<li>Excessive Access Rights<\/li>\n<li>Misconfigured SSL<\/li>\n<li>Weaknesses in Default Configurations<\/li>\n<\/ul>\n<\/div>[\/vc_column_inner][vc_column_inner width=&#8221;1\/3&#8243;]<div class=\"gem-list gem-list-type-checkbox gem-list-color-5\" ><p><strong>Other Attacks against Web Servers<\/strong><\/p>\n<ul>\n<li>Website Defacement<\/li>\n<li>HTTP Response Splitting<\/li>\n<li>Web Cache Poisoning<\/li>\n<li>Brute Forcing Authentication Schemes<\/li>\n<li>Streamline Testing with Automation<\/li>\n<li>Hacking Web Applications<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<p><strong>Web server Security Tools<\/strong><\/p>\n<ul>\n<li>Syhunt Dynamic<\/li>\n<li>N-Stalker Web Application Security Scanner<\/li>\n<li>Wikto<\/li>\n<li>Acunetix Web Vulnerability Scanner<\/li>\n<li>HackAlert<\/li>\n<li>QualysGuard Malware Detection<\/li>\n<\/ul>\n<\/div>[\/vc_column_inner][vc_column_inner width=&#8221;1\/3&#8243;]<div class=\"gem-list gem-list-type-checkbox gem-list-color-5\" ><p><strong>Managing and Hardening Web Servers<\/strong><\/p>\n<ul>\n<li>What is Patch Management?<\/li>\n<li>Identifying Appropriate Sources for Updates and Patches<\/li>\n<li>Installation of a Patch<\/li>\n<li>Implementation and Verification of a Security Patch or Upgrade<\/li>\n<li>Patch Management Tools<\/li>\n<li>Support and End of Life<\/li>\n<li>Locking Down Services<\/li>\n<li>Designing for Network Segmentation<\/li>\n<li>Sandboxing<\/li>\n<\/ul>\n<\/div>[\/vc_column_inner][\/vc_row_inner][\/vc_tta_section][vc_tta_section title=&#8221;Module 10: SQL Injection&#8221; tab_id=&#8221;1483688947780-c0f9eb3e-fcbf&#8221;][vc_row_inner][vc_column_inner width=&#8221;1\/3&#8243;]<div class=\"gem-list gem-list-type-checkbox gem-list-color-5\" ><p><strong>Why SQL Injection Matters<\/strong><\/p>\n<ul>\n<li>The Significance of SQL Injection<\/li>\n<li>Executing a SQL Injection Attack<\/li>\n<li>The Impact of a Successful Attack<\/li>\n<li>SQL Injection in the Wild<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<p><strong>Understanding SQL Queries<\/strong><\/p>\n<ul>\n<li>Understanding Structured Query Language<\/li>\n<li>Statement Termination<\/li>\n<li>Using the SQL Comment Syntax<\/li>\n<li>SQL Queries versus Data<\/li>\n<li>The Value of Internal Exceptions<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<p><strong>The Mechanics of SQL Injection Attacks<\/strong><\/p>\n<ul>\n<li>Types of SQL Injection<\/li>\n<li>The Single Character Injection Test<\/li>\n<li>Modifying the Query Structure<\/li>\n<li>Circumventing Website Logins<\/li>\n<li>Modifying Data and Database Objects<\/li>\n<li>Identifying the Risk in Code<\/li>\n<li>Understanding and Detecting Input Sanitization<\/li>\n<\/ul>\n<\/div>[\/vc_column_inner][vc_column_inner width=&#8221;1\/3&#8243;]<div class=\"gem-list gem-list-type-checkbox gem-list-color-5\" ><p><strong>Discovering Schema and Extracting Data<\/strong><\/p>\n<ul>\n<li>Understanding the Union Operator<\/li>\n<li>Executing Union Injection<\/li>\n<li>Manual Database Structure Discovery with Error-based Injection<\/li>\n<li>Querying System Objects for Schema Discovery<\/li>\n<li>Extracting Schema Details with Union Injection<\/li>\n<li>Enumerating Result Sets with Sub-queries<\/li>\n<li>Extracting Schema Details with Error-based Injection<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<p><strong>Blind SQL Injection<\/strong><\/p>\n<ul>\n<li>Basic and Blind Attack Success Criteria<\/li>\n<li>Understanding a Blind Attack<\/li>\n<li>Applying Boolean Based Injection<\/li>\n<li>Constructing Yes and No Questions for Boolean Based Injection<\/li>\n<li>Enumerating via ASCII Values<\/li>\n<li>Where Time Based Injection Makes Sense<\/li>\n<li>Understanding the WAITFOR DELAY Command<\/li>\n<li>Constructing a Time Based Attack<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<p><strong>Advanced SQL Injection Concepts<\/strong><\/p>\n<ul>\n<li>Database Server Feature Comparison<\/li>\n<li>Establishing Account Identity and Rights<\/li>\n<li>Enumerating Other Databases on the System<\/li>\n<li>Creating Database Logins<\/li>\n<li>Extracting Passwords from SQL Server Hashes<\/li>\n<li>Replicating a Table Using OPENROWSET<\/li>\n<li>Executing Commands on the Operating System<\/li>\n<li>SQL Injection for Network Reconnaissance<\/li>\n<\/ul>\n<\/div>[\/vc_column_inner][vc_column_inner width=&#8221;1\/3&#8243;]<div class=\"gem-list gem-list-type-checkbox gem-list-color-5\" ><p><strong>Defending Against Attacks<\/strong><\/p>\n<ul>\n<li>Implement Proper Error Handling<\/li>\n<li>Validating Untrusted Data<\/li>\n<li>Query Parameterization<\/li>\n<li>Stored Procedures<\/li>\n<li>Object Relational Mappers<\/li>\n<li>The Principle of Least Privilege<\/li>\n<li>Isolating the Database Network Segment<\/li>\n<li>Using an IDS or WAF<\/li>\n<li>Keeping Software Patched and Current<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<p><strong>Evasion Techniques<\/strong><\/p>\n<ul>\n<li>Understanding Signatures<\/li>\n<li>Basic Evasion Techniques<\/li>\n<li>Encoding for Evasion<\/li>\n<li>Splitting Strings<\/li>\n<li>White Space Diversity<\/li>\n<li>Inline Comments<\/li>\n<li>Variables<\/li>\n<li>String Manipulation<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<p><strong>Automating Attacks<\/strong><\/p>\n<ul>\n<li>Testing in the Browser with SQL Inject Me<\/li>\n<li>Fuzz Testing with Burp Suite<\/li>\n<li>Data Extraction with Havij<\/li>\n<li>Schema Mapping with sqlmap<\/li>\n<li>Dynamic Analysis Testing with NetSparker<\/li>\n<\/ul>\n<\/div>[\/vc_column_inner][\/vc_row_inner][\/vc_tta_section][vc_tta_section title=&#8221;Module 11: Hacking Web Applications&#8221; tab_id=&#8221;1483688805880-aa6ca753-cf34&#8243;][vc_row_inner][vc_column_inner width=&#8221;1\/3&#8243;]<div class=\"gem-list gem-list-type-checkbox gem-list-color-5\" ><p><strong>Web App Concepts<\/strong><\/p>\n<ul>\n<li>Introduction to Web Applications<\/li>\n<li>Web Application Components<\/li>\n<li>How Web Applications Work?<\/li>\n<li>Web Application Architecture<\/li>\n<li>Web 2.0 Applications<\/li>\n<li>Vulnerability Stack<\/li>\n<li>Web Attack Vectors<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<p><strong>Understanding Security in Web Applications<\/strong><\/p>\n<ul>\n<li>The State of Web Application Security<\/li>\n<li>Understanding Web Application Security<\/li>\n<li>Query Strings, Routing, and HTTP Verbs<\/li>\n<li>The Discoverability of Client Security Constructs<\/li>\n<li>Protections Offered by Browsers<\/li>\n<li>What the Browser Can\u2019t Defend Against<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<p><strong>Reconnaissance and Footprinting<\/strong><\/p>\n<ul>\n<li>Spidering with NetSparker<\/li>\n<li>Forced Browsing with Burp Suite<\/li>\n<li>Directory Traversal<\/li>\n<li>Banner Grabbing with Wget<\/li>\n<li>Server Fingerprinting with Nmap<\/li>\n<li>Discovery of Development Artefacts with Acunetix<\/li>\n<li>Discovery of Services via Generated Documentation<\/li>\n<li>Discovering Framework Risks<\/li>\n<li>Identifying Vulnerable Targets with Shodan<\/li>\n<\/ul>\n<\/div>[\/vc_column_inner][vc_column_inner width=&#8221;1\/3&#8243;]<div class=\"gem-list gem-list-type-checkbox gem-list-color-5\" ><p><strong>Tampering of Untrusted Data<\/strong><\/p>\n<ul>\n<li>OWASP and the Top 10 Web Application Security Risks<\/li>\n<li>Understanding Untrusted Data<\/li>\n<li>Parameter Tampering<\/li>\n<li>Hidden Field Tampering<\/li>\n<li>Mass Assignment Attacks<\/li>\n<li>Cookie Poisoning<\/li>\n<li>Insecure Direct Object References<\/li>\n<li>Defending Against Tampering<\/li>\n<li>Basic techniques<\/li>\n<li>Deep data hiding<\/li>\n<li>Brute-force and dictionary attacks<\/li>\n<li>Account lockout attack<\/li>\n<li>Path and information disclosure<\/li>\n<li>Forced browsing<\/li>\n<li>Path traversal<\/li>\n<li>Unicode encoding<\/li>\n<li>Parameter delimiter<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<p><strong>Incjection attacks<\/strong><\/p>\n<ul>\n<li>PHP injection<\/li>\n<li>Direct static code injection<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<p><strong>Attacks Involving the Client<\/strong><\/p>\n<ul>\n<li>Reflected Cross Site Scripting (XSS)<\/li>\n<li>Persistent Cross Site Scripting (XSS)<\/li>\n<li>Defending Against XSS Attacks<\/li>\n<li>Identifying XSS Risks and Evading Filters<\/li>\n<li>Client Only Validation<\/li>\n<li>Insufficient Transport Layer Security<\/li>\n<li>Cross Site Request Forgery (CSRF)<\/li>\n<li>Cross Site Tracing attack (XST)<\/li>\n<li>Cross Site Request Forgery attack (XSRF)<\/li>\n<\/ul>\n<\/div>[\/vc_column_inner][vc_column_inner width=&#8221;1\/3&#8243;]<div class=\"gem-list gem-list-type-checkbox gem-list-color-5\" ><p><strong>Attacks against Identity Management and Access Controls<\/strong><\/p>\n<ul>\n<li>Understanding Weaknesses in Identity Management<\/li>\n<li>Identity Enumeration<\/li>\n<li>Weaknesses in the \u2018Remember Me\u2019 Feature<\/li>\n<li>Resources Missing Access Controls<\/li>\n<li>Insufficient Access Controls<\/li>\n<li>Privilege Elevation<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<p><strong>Denial of Service Attacks<\/strong><\/p>\n<ul>\n<li>Understanding DoS<\/li>\n<li>Exploiting Password Resets<\/li>\n<li>Exploiting Account Lockouts<\/li>\n<li>Distributed Denial of Service (DDoS)<\/li>\n<li>Automating DDoS Attacks with LOIC<\/li>\n<li>DDoS as a Service<\/li>\n<li>Features at Risk of a DDoS Attack<\/li>\n<li>Other DDoS Attacks and Mitigations<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<p><strong>More advanced techniques<\/strong><\/p>\n<ul>\n<li>Spying on data with a browser<\/li>\n<li>Session hijacking<\/li>\n<li>Session fixation<\/li>\n<li>Automated security testing<\/li>\n<li>Improper Error Handling<\/li>\n<li>Understanding Salted Hashes<\/li>\n<li>Insecure Cryptographic Storage<\/li>\n<li>Unvalidated Redirects and Forwards<\/li>\n<li>Exposed Exceptions Logs with ELMAH<\/li>\n<li>Vulnerabilities in Web Services<\/li>\n<\/ul>\n<\/div>[\/vc_column_inner][\/vc_row_inner][\/vc_tta_section][\/vc_tta_accordion][\/vc_column][\/vc_row]<\/p>\n<\/section>","protected":false},"excerpt":{"rendered":"<p>[vc_row el_class=&#8221;row-this-tabs-kvik&#8221;][vc_column][vc_column_text css_animation=&#8221;top-to-bottom&#8221;] Web\u00a0 Security Testing (WST) is the Security testing techniques for vulnerabilities or security holes in corporate websites&#8230;<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v21.0 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Web Application Penetration Testing Course | Web Application Penetration Testing<\/title>\n<meta name=\"description\" content=\"Web Security Testing (WST) is the Security testing techniques for vulnerabilities or security holes in corporate websites and web applications.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.armourinfosec.com\/website-security\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Web Application Penetration Testing Course | Web Application Penetration Testing\" \/>\n<meta property=\"og:description\" content=\"Web Security Testing (WST) is the Security testing techniques for vulnerabilities or security holes in corporate websites and web applications.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.armourinfosec.com\/website-security\/\" \/>\n<meta property=\"og:site_name\" content=\"Armour Infosec\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/ArmourInfosec\" \/>\n<meta property=\"article:modified_time\" content=\"2022-09-11T15:46:18+00:00\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:site\" content=\"@ArmourInfosec\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"16 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.armourinfosec.com\/website-security\/\",\"url\":\"https:\/\/www.armourinfosec.com\/website-security\/\",\"name\":\"Web Application Penetration Testing Course | Web Application Penetration Testing\",\"isPartOf\":{\"@id\":\"https:\/\/www.armourinfosec.com\/#website\"},\"datePublished\":\"2015-06-24T05:44:23+00:00\",\"dateModified\":\"2022-09-11T15:46:18+00:00\",\"description\":\"Web Security Testing (WST) is the Security testing techniques for vulnerabilities or security holes in corporate websites and web applications.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.armourinfosec.com\/website-security\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.armourinfosec.com\/website-security\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.armourinfosec.com\/website-security\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.armourinfosec.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Certified Web Security Expert\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.armourinfosec.com\/#website\",\"url\":\"https:\/\/www.armourinfosec.com\/\",\"name\":\"Armour Infosec\",\"description\":\"Do Your Part - Be Security Smart\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.armourinfosec.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Web Application Penetration Testing Course | Web Application Penetration Testing","description":"Web Security Testing (WST) is the Security testing techniques for vulnerabilities or security holes in corporate websites and web applications.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.armourinfosec.com\/website-security\/","og_locale":"en_US","og_type":"article","og_title":"Web Application Penetration Testing Course | Web Application Penetration Testing","og_description":"Web Security Testing (WST) is the Security testing techniques for vulnerabilities or security holes in corporate websites and web applications.","og_url":"https:\/\/www.armourinfosec.com\/website-security\/","og_site_name":"Armour Infosec","article_publisher":"https:\/\/www.facebook.com\/ArmourInfosec","article_modified_time":"2022-09-11T15:46:18+00:00","twitter_card":"summary_large_image","twitter_site":"@ArmourInfosec","twitter_misc":{"Est. reading time":"16 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.armourinfosec.com\/website-security\/","url":"https:\/\/www.armourinfosec.com\/website-security\/","name":"Web Application Penetration Testing Course | Web Application Penetration Testing","isPartOf":{"@id":"https:\/\/www.armourinfosec.com\/#website"},"datePublished":"2015-06-24T05:44:23+00:00","dateModified":"2022-09-11T15:46:18+00:00","description":"Web Security Testing (WST) is the Security testing techniques for vulnerabilities or security holes in corporate websites and web applications.","breadcrumb":{"@id":"https:\/\/www.armourinfosec.com\/website-security\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.armourinfosec.com\/website-security\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.armourinfosec.com\/website-security\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.armourinfosec.com\/"},{"@type":"ListItem","position":2,"name":"Certified Web Security Expert"}]},{"@type":"WebSite","@id":"https:\/\/www.armourinfosec.com\/#website","url":"https:\/\/www.armourinfosec.com\/","name":"Armour Infosec","description":"Do Your Part - Be Security Smart","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.armourinfosec.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"}]}},"_links":{"self":[{"href":"https:\/\/www.armourinfosec.com\/wp-json\/wp\/v2\/pages\/167"}],"collection":[{"href":"https:\/\/www.armourinfosec.com\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.armourinfosec.com\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.armourinfosec.com\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.armourinfosec.com\/wp-json\/wp\/v2\/comments?post=167"}],"version-history":[{"count":0,"href":"https:\/\/www.armourinfosec.com\/wp-json\/wp\/v2\/pages\/167\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.armourinfosec.com\/wp-json\/wp\/v2\/media?parent=167"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}