As a systems administrator, you need to be sure the sites, apps, and networks you oversee are safe from attacks. Hackers and other attackers are constantly on the prowl for weaknesses, and one of the best ways to counter them is with penetration testing. These simulated assaults on your own applications reveal hidden weaknesses and let you patch and harden your own defenses before they can be exploited.
In this liveProject, you’ll take on the dual role of both attacker and defender of a vulnerable e-commerce site. You’ll start out by attacking your own systems, using browser development tools to map the attack surface of a website, gaining access with a SQL injection attack, and extracting valuable data. With the flaws in your system revealed, you’ll step into the defensive role to harden your system’s security, set up file monitoring, and work to prevent future attacks. This liveProject comes with full access to a virtual training web application, so you can experiment without endangering your own software.
This project is designed for learning purposes and is not a complete, production-ready application or solution.