Spiros Antonatos

As a systems administrator, you need to be sure the sites, apps, and networks you oversee are safe from attacks. Hackers and other attackers are constantly on the prowl for weaknesses, and one of the best ways to counter them is with penetration testing. These simulated assaults on your own applications reveal hidden weaknesses and let you patch and harden your own defenses before they can be exploited.

In this liveProject, you’ll take on the dual role of both attacker and defender of a vulnerable e-commerce site. You’ll start out by attacking your own systems, using browser development tools to map the attack surface of a website, gaining access with a SQL injection attack, and extracting valuable data. With the flaws in your system revealed, you’ll step into the defensive role to harden your system’s security, set up file monitoring, and work to prevent future attacks. This liveProject comes with full access to a virtual training web application, so you can experiment without endangering your own software.

E-commerce sites handle valuable personal information such as names, addresses, and credit card details. This makes them ripe for malicious attacks. Successful web developers use penetration tests—simulated attacks on your own applications—in order to spot vulnerabilities and shore up security.

In this liveProject, you’ll take on the dual role of both attacker and defender of a vulnerable e-commerce site. You’ll start out wearing the black hat of a hacker as you perform reconnaissance, exploit vulnerabilities with specialist tools, and attempt to extract data. Once you’ve cracked open the holes in your system, you’ll step into the defensive role to fix vulnerabilities in your code that have led to injection attacks. This liveProject comes with full access to a virtual training web application, so you can experiment without endangering your own software.