Internship Report.

Initial Experience/Journey

I would like to submit my February Month Internship Report.

My Journey/Personal experience so far in CyberSapiens United LLP has been excellent. Also i have gained more knowledge by researching and through live sessions. Practical-based tasks are assigned which is the best part.

Knowledge gained

? XSS (cross site scripting)

? HTML Injection.

? Open redirection.

? SQL Injection.

? Parameter Tampering.

? Open Directory/Directory Listing.

? CORS (CROSS-ORIGIN RESOURCE SHARING).

? Clickjacking.

? Sniffing/Eavesdropping attack.

? HTTP Host header attacks.

? Status Codes.

Vulnerabilities learned

? XSS (cross site scripting)

? HTML Injection.

? Open redirection.

? SQL Injection

? CORS (CROSS-ORIGIN RESOURCE SHARING).

? Sniffing/Eavesdropping attack.

? HTTP Host header attacks.

Tools used

Whois

Google dork

Bwapp

Nmap

nikto

whatweb

Theharvester

SpiderFoot

SQLMap

Subfinder

DirHunt

owasp zap

GitHub Dorking

clickjackingpoc

Wireshark

Wpscan

shodan

Investigator

Challenges done

Google Dorking,

Automated Scanning Tools,

Clickjacking

lab of Host Header Injection

CORS

Sniffing/Eavesdropping attack

SQL Injection

Directory Listing or Open directory

Parameter Tampering

Status Codes

Overall experience

Overall experience was great so far.

Practical-based tasks are assigned which is the best part.

So much to learn every day also platforms/labs like TryHackMe and PortSwigger are really helpful to have practical hands-on concepts to have a great understanding. Overall training is a great exposure so far. As we are moving ahead day by day, in every step something new to learn. CyberSapiens is very professional and training us too.

Thanks&Regards,

Atharva Joshi