Principles X - (Cybersecurity - Intro & Web)

Cybersecurity (and more accurately, Penetration Testing) concepts are used to solve challenges and succeed in Capture-the-Flag (CTF) competitions, which serve as a safe and educational platform where students can learn and practice these skills. Web vulnerabilities are a mainstay in these competitions, where competitors are often presented a web app to explore, exploit, or break into.

Any service or application made and hosted digitally is a potentially vulnerable attack vector - and there is no attack surface larger than that of the Internet's, where hundreds of millions of websites reside. Combining all skills previously learnt at SG Code Campus with this course will allow students to secure their own web applications and confidently push code to production!

In this course we will learn how to:
- navigate the world of cybersecurity capture-the-flag (CTF) competitions
- think of CTF problems in a wider, macro, real-world lens
- use the Linux command line effectively
- understand the various basic components of a website and how to abuse them when poorly-configured
- perform cross-site-scripting (XSS), cross-site request forgery (CSRF), and server-side request forgery (SSRF) attacks
- exploit database injection vulnerabilities
- perform a host of other attacks on web services
- use CVE directories and exploit databases to exploit real-world vulnerabilities
- document one's progress in the form of challenge writeups or basic vulnerability reports

Course Schedule

This is an 8 lesson course. Lessons will be conducted in our Marine Parade Campus (#03-04 Parkway Centre) from 2:30pm-4:30pm, 9 February 2020 to 29 March 2020.

**NO MINIMUM CLASS SIZE
We appreciate that parents need certainty when signing up for classes. Hence, we do not have a minimum class size. In the event that a course has only one sign-up, lessons may end earlier as they are conducted on a 1-on-1 basis. Parents will be informed of any adjustments to the class duration at least 2 days in advance.