Enterprise Ethical Hacking Cloud Applications
summary
Focuses on practical steps: use Microsoft Threat Modeling Tool, OWASP ZAP HUD to spider/active/Ajax scans, breakpoints and fuzzing against a Juice Shop Heroku demo, and OpenVAS scans 50,000 vulnerabilities to find exposed ports and weak ciphers. Demonstrates Kali/Metasploitable workflows, CI/CD integration with a Jenkins plugin, and recommends SQLmap for injections and hping for DOS. Claims 84% of attacks hit the app layer and shows concrete findings like exposed session cookies, X-Frame issues and RC4 crypto.
AI-written summary · about
chapters (11)
- 0:00Introduction to ethical hacking
- 2:56What is ethical hacking
- 7:07Penetration testing basics
- 12:28DevSecOps and threat modeling
- 19:55Threat modeling tools
- 22:22OAS Zap overview and demo
- 30:12OAS Zap active and passive scans
- 37:43OAS Zap CI/CD integration
- 40:12Live demo with OAS Zap
- 46:16OpenVAS vulnerability scanning
- 50:30Q&A and tool recap
related talks
58mOpen Source Pentesting and Security Analysis Tools: the DevOps way
01h 27mProactive Defense: Leveraging Hacker Tools for Early Vulnerability Detection
44mHack Yourself: Intro to pentesting with ZAP
41mLive Hacking: Breaking into Your Web App
30mHow to hack a web app?
47mLive Hacking: Breaking into Your Web App
35mInside a hacker’s mind
46mLive hacking: Breaking into your Java web app