Practical Web Application Penetration Testing (WAPT)

Software Security Fundamentals
How to approach the security testing of a web application
How to document security issues through Proof of Concepts (PoC)
How to reason about risk and threats associated to security issues
How to use Burp Suite to perform a web penetration test
Requirements
Basic linux knowledge
Basic HTTP knowledge
Description
This course has been developed with a clear objective: show in practice what it means to perform a Web Application Penetration Test (WAPT), exactly as it would happen with a real client in a typical week of work. This approach will allow you to quickly reach the experience level of a junior penetration tester.
Consider these questions:Are you interested in working in the security industry?Do you want to learn how to test the security of a Web Application?Do you like hands-on, practice-based learning?If you answered yes to these questions, then this course is for you.In this course, we will show how to test the security of Secure Bank, a home banking application designed as a training ground for penetration testers and web developers. During the test we will find 40+ security issues belonging to the following categories: - Information Disclosure- Injection Vulnerabilities- Authentication- Authorization- Session Management- Business Logic Vulnerabilities- Data Validation Vulnerabilities- Cryptography- Insecure ConfigurationFor each security issue we will show how to find the vulnerable behavior, how to exploit it and finally how to explain it using written Proof of Concepts (PoCs) to the final client. At the end of the course you will see 40 different PoCs for 40 different vulnerabilities. This should give you a very good intuition on WAPTÂ testing, something that will help you to get started in the industry or to simply refine your skills in case you need to.
Cybersecurity enthusiasts curious about Web Security Testing,People interested in working in the security industry as Web Penetration Testers,People interested about security in general
Homepage