Day 1: Foundations of Security & Web Application Vulnerabilities

Module 1: Web Application Security Basic

Http / Https Fundamentals.
- Why there is differences.
- What is more secure
- What will happen if my applications using HTTP instead HTTPS
- Bonus: - What is SHTTP.
OWASP Top 10 vulnerabilities overview examples (XSS, SQLi, CSRF)

Module 2: Hands-on Web Attacks & Defense

Demo: SQL Injection & Demo: Cross-Site Scripting (XSS)
- What does these attacks can do.
- These attacks are common example you can do this as bug bounty whichever application offers bug bounty exercises.
Mitigation Techniques

Module 3: Network Security Fundamentals

Common Network threats (MITM, Sniffing)
- Examples of these attacks
- Real-world example – Equifax data breach
- 2013 Facebook MITM attack
Basic firewalls & IDS also IPS concepts
- Explain the firewall types of firewalls
- What are the differences

Module 4: Vulnerability Scanning Basic

Day 2: Network Security & Penetration Testing Basics

Module 5: Password Security & Cracking

Module 6: Hands-on Network Penetration Testing

Module 7: Wireless Security Risks

Module 8: Defensive Security & Patching

Day 3: Mobile Security & Real-World Remediation

Module 9: Mobile security overview

Module 10: Hands-on Mobile app testing

Module 11: Security Best Practices

Module 12 (Final Exercise)

HSVM-YN: Hacking and Security Vulnerability Management