Web Penetration Testing
Attack web applications the way professional testers do.
About this course
Attack web applications the way professional testers do. Over four days you will learn how web apps and HTTP work, exploit server-side flaws such as SQL injection and SSRF and client-side flaws such as cross-site scripting, bypass filters and web application firewalls, and build your own testing methodology.
What you'll learn
- The fundamental architecture and functionality of web applications
- Common server-side vulnerabilities and attack techniques
- Client-side attack methods and exploitation tactics
- Scanning tools and techniques used to identify and execute advanced web application attacks
Curriculum
- Introduction
- How Web Apps Work
- Intro to HTTP
- Broken Authentication
- Broken Access Control
- SQL Injection
- SQL Injection
- Command Injection
- XML External Entity (XXE) Injection
- Directory Traversal
- File Upload
- Server-Side Request Forgery (SSRF)
- Cross-Site Scripting (XSS)
- Cross-Site Request Forgery (CSRF)
- Scanning, Filter Bypasses, WAF Bypasses
- Logic Bugs
- Building a Methodology
- Performing a Web App Pentest
Who it's for
Aspiring penetration testers and security professionals building practical web skills.
Before you start
- No pre-requisite knowledge required other than general computer use
Part of these Alalamia diplomas
Related courses
More in Cybersecurity Skills & Standards →Cyber Security for the End User - Identifying and Preventing Advanced Threats - Intermediate
Cybersecurity Skills & Standards
View course →DVMS Cyber Resilience Professional Awareness
Cybersecurity Skills & Standards
View course →DVMS Cyber Resilience Professional Foundation
Cybersecurity Skills & Standards
View course →DVMS Cyber Resilience Professional Practitioner
Cybersecurity Skills & Standards
View course →Ethical Hacker Bootcamp
Cybersecurity Skills & Standards
View course →Hacking & Defending Active Directory
Cybersecurity Skills & Standards
View course →Let's plan your next step together.
Tell us the course or certification you have in mind and we'll send the outline, upcoming dates, fees and private-team options.