Add Web Hacking Fundamentals Campaign

[Madanb31]

Name of Proposer

Madan

Campaign Name

Web Hacking Fundamentals

Campaign Description

• Understanding the security issues with web applications and learning how to exploit them using industry tools and techniques.
• The campaign is beginner-friendly.
• This campaign helps you break into cyber security by providing information about how the web works and how they can be exploited through various methods.

Number of Quests

2 quests

Quest 1 Summary

• Quest 1 focuses on how the website works and how you request content from the web server using http protocol.
• www.tryhackme.com is a great website to learn about any topic related to cybersecurity.
• To become a better hacker it's vital to understand the underlying functions of the world wide web and what makes it work.

Quest 1 Learning Objectives

• Learn how the websites are created
• Learn in detail about the http protocol

Quest 1 Deliverables

• Submitting the quiz

Quest 2 Summary

• Quest 2 focuses on introduction to using Burp Suite for Web Application pentesting.
• www.portswigger.net is a free online web security training from the creators of Burp Suite and www.tryhackme.com is also a great place to start at.
• Burp Suite is an integrated platform/graphical tool for performing security testing of web applications.

Quest 2 Learning Objectives

• What Burp Suite is
• Installing Burp Suite for yourself
• Introduction to the Burp Proxy
• Connecting and proxying HTTPS

Quest 2 Deliverables

• Screenshot of the proxy tab in which the request made to https://app.stackup.dev is captured

[mitprogrammer007]

Good Day Madan, I'm asapnonzy. This campaign you suggested is actually nice.

1. I noticed in the Quest 1 Learning Objectives, you talked about how beginners should learn how websites are created and how they should also learn in detail about the http protocol which I totally agree with you, but I feel that they also learn a high level language for example JAVASCRIPT since we are talking about web applications. I also noticed you talked about a web app pen testing tool which was Burp Suite, well I suggest we can also try Bee Box. Bee Box is a fully configured virtual machine that includes bWAPP and is the easiest way to get started. You can install Bee Box using Oracle VirtualBox, VMWare or any virtual machine, it also helps in web app pen testing.

2. Learning JAVASCRIPT programming skills helps one in to discover vulnerabilities and carry web exploitation since most of the applications on the web use JavaScript or its libraries. While for Bee box it helps security enthusiasts, developers and students to discover and to prevent web vulnerabilities.

[Sayan-404]

Name of Proposer

ShyOnxD

Hello guys @Madanb31 @asapnonzy I see you guys did an excellent job in designing this campaign but here I would like to add a few points which are aimed to make to it more appealing and beginner friendly to the Stackie participating in it

Pre Requisites(Optional):

1. https://app.stackup.dev/campaign_page/html-basics-for-web-dev
2. https://app.stackup.dev/campaign_page/javascript-basics
3. https://app.stackup.dev/campaign_page/html-intermediate-for-web-dev
4. https://app.stackup.dev/campaign_page/javascript-basics-ii

These are very well structured campaigns who will give the Stackies a solid base for their web2 knowledge without doing a much of research for the required materials.

An Extra Material for Quest 1:

I think the Stackies should be introduced to developer.mozilla as soon as possible since it is a wonderful site and has a lot of learning resources and it's HTTP requests page is a great learning resource for someone who is just starting

https://developer.mozilla.org/en-US/docs/Web/HTTP

Quest 3 Summary

• This will be the post learning exploration quest.
• This will focus on different aspects of web hacking which Stackies may find worth exploring

Quest 3 Learning Objectives

• Learn about CTF's and how they can help to kickstart your hacking career
• Learn about some important websites and youtube channels which can help you learn everything about hacking free of cost
• Find out hacking communities where you can share your experience or learn from other hacker's experiences to boost your journey

Quest 3 Deliverables

• Follow along quiz

Here are some important learning resources which will help everyone in their hacking journey:

• https://hacker101.com
• https://portswigger.com
• https://picoctf.org
• https://medium.com/@yuiminglee
• https://www.youtube.com/c/nahamsec
• https://www.youtube.com/c/liveoverflow
• https://www.youtube.com/c/pwnfunction
• https://www.youtube.com/c/STOKfredrik