Student Reviews
                
                    
                            
    
    
    
    
                    
                    ( 5 Of 5 )
                
                1 review
             
         
        
        
     
          
        
            
                
                    Video of Web Hacking 101 with PicoCTF   CTF Walkthrough in Web PenTesting course by Motasem Hamdan channel, video No. 89 free certified online                
            
            
                Ready to learn ethical hacking the fun way? I use PicoCTF to walk you through real-world web app vulnerabilities , XSS, SQLi, and more. Hands-on, beginner-friendly.
Receive Cyber Security Field, Certifications Notes and Special Training Videos 
https://buymeacoffee.com/notescatalog/membership
Writeup
https://motasem-notes.net/web-hacking-101-with-picoctf-ctf-walkthrough/
Store
https://buymeacoffee.com/notescatalog/extras
Patreon
https://www.patreon.com/motasemhamdan
Instagram
https://www.instagram.com/motasem.hamdan.official/
LinkedIn
[1]: https://www.linkedin.com/in/motasem-hamdan-7673289b/
[2]: https://www.linkedin.com/in/motasem-eldad-ha-bb42481b2/
Twitter
https://twitter.com/ManMotasem
Facebook
https://www.facebook.com/motasemhamdantty/
TikTok
https://www.tiktok.com/@motasemhamdan0
0:00 - Intro to Practical Web Hacking 
0:50 - SSTI 1 - Server-Side Template Injection Basics 
2:50 - SSTI 2 - Bypassing Filters with Encoded Payloads 
7:09 - No Sanity - Insecure File Upload Exploitation 
10:11 - Heap Dump - Memory Dump Analysis for Flag 
17:03 - 3vil - Eval Injection in Flask App 
23:18 - Websocket Fish - Exploiting Eval in Chessbot 
30:56 - Cookie Monster - Cookie Decoding for Flag 
33:51 - Web Decode - Using Web Inspector 
36:35 - Unminify - Finding Flags in Minified Pages 
37:51 - Bookmarklet - Running JavaScript in Browser Console 
39:23 - Pachinko - NAND Circuit Challenge with Repeater 
44:29 - Pachinko 2 - NAND Circuit Logic Explanation 
46:01 - Trickster - PNG File Upload Bypass & Web Shell 
49:30 - Finding the Flag via Web Shell