Practical Web Applicaton Penetration Testing
Level:
Beginner to Intermediate
Sections:
13
Videos:
95
Duration:
17 hours
Level:
Beginner to Intermediate
Sections:
13
Videos:
95
Duration:
17 hours
This course has been developed with a clear objective: show in practice what it means to perform a Web Application Penetration Test (WAPT), exactly as it would happen with a real client in a typical week of work. This approach will allow you to quickly reach the experience level of a junior penetration tester.
Consider these questions:
If you answered yes to these questions, this course is for you.
In this course, we will show how to test the security of Secure Bank, a home banking application designed as a training ground for penetration testers and web developers. During the test we will find 40+ security issues belonging to the following categories:
During the course we will use the community edition Burp Suite to find and exploit the different vulnerabilities. This means we will work with different Burp Suite functionalities and we will read and modify lots of HTTP message.
For each security issue we will show how to find the vulnerable behavior, how to exploit it and finally how to explain it using written Proof of Concepts (PoCs) to the final client.
At the end of the course you will see 40 different PoCs for 40 different security issues.
This will give you a strong intuition on WAPT testing, a key ability to get started in the security industry or simply to refine and structure your abilities.
By the end of the course, participants will develop a strong understanding over how to perform a WAPT activity.
Specifically, the following practical skills will be transfered:
As a starting point, we assume the following knowledge: