Course Images

Web Application Penetration Testing Course

Web Application Penetration Testing Course

Highlights

  • On-Demand course

  • 19 hours 38 minutes

  • All levels

Description

Gain the skills and credentials to kickstart a successful career and learn from the experts with this step-by-step training course. This Web Application Penetration Testing Course has been specially designed to help learners gain a good command of Web Application Penetration Testing Course, providing them with a solid foundation of knowledge to become a qualified professional.

Through this Web Application Penetration Testing Course, you will gain both practical and theoretical understanding of Web Application Penetration Testing Course that will increase your employability in this field, help you stand out from the competition and boost your earning potential in no time.

Not only that, but this training includes up-to-date knowledge and techniques that will ensure you have the most in-demand skills to rise to the top of the industry. This qualification is fully accredited, broken down into several manageable modules, ideal for aspiring professionals. 

Learning outcome

  • Familiar yourself with the recent development and updates of the relevant industry

  • Know how to use your theoretical knowledge to adapt in any working environment

  • Get help from our expert tutors anytime you need

  • Access to course contents that are designed and prepared by industry professionals

  • Study at your convenient time and from wherever you want

Why should I take this course?

  • Affordable premium-quality E-learning content, you can learn at your own pace.

  • You will receive a completion certificate upon completing the course.

  • Internationally recognized Accredited Qualification will boost up your resume.

  • You will learn the researched and proven approach adopted by successful people to transform their careers.

  • You will be able to incorporate various techniques successfully and understand your customers better.

Requirements

  • No formal qualifications required, anyone from any academic background can take this course.

  • Access to a computer or digital device with internet connectivity.

Course Curriculum

Unit 01: Introduction

▶

About The Course

🕐 00:03:00

Unit 02: BE PREPARED

▶

Web Attack Simulation Lab

🕐 00:12:00

Unit 03: WEB APPLICATION TECHNOLOGIES

Web application technologies 101 - PDF

🕐 01:34:00

▶

HTTP Protocol Basics

🕐 00:11:00

▶

Encoding Schemes

🕐 00:13:00

▶

Same Origin Policy - SOP

🕐 00:06:00

▶

HTTP Cookies

🕐 00:11:00

▶

Cross-origin resource sharing

🕐 00:05:00

▶

Web application proxy - Burp suite

🕐 00:09:00

Unit 04: INFORMATION GATHERING - MAPPING THE APPLICATIONS

▶

Fingerprinting web server

🕐 00:05:00

▶

DNS Analysis - Enumerating subdomains

🕐 00:04:00

▶

Metasploit for web application attacks

🕐 00:12:00

▶

Web technologies analysis in real time

🕐 00:03:00

▶

Outdated web application to server takeover

🕐 00:08:00

▶

BruteForcing Web applications

🕐 00:06:00

▶

Shodan HQ

🕐 00:07:00

▶

Harvesting the data

🕐 00:05:00

▶

Finding link of target with Maltego CE

🕐 00:09:00

Unit 05: CROSS-SITE SCRIPTING ATTACKS - XSS

Cross Site Scripting- XSS - PDF

🕐 01:08:00

▶

Cross site scripting

🕐 00:07:00

▶

Reflected XSS

🕐 00:14:00

▶

Persistent XSS

🕐 00:11:00

▶

DOM-based XSS

🕐 00:10:00

▶

Website defacement through XSS

🕐 00:09:00

▶

XML Documents & database

🕐 00:14:00

▶

Generating XSS attack payloads

🕐 00:13:00

▶

XSS in PHP, ASP & JS Code review

🕐 00:13:00

▶

Cookie stealing through XSS

🕐 00:12:00

▶

Advanced XSS phishing attacks

🕐 00:08:00

▶

Advanced XSS with BeEF attacks

🕐 00:10:00

▶

Advanced XSS attacks with Burp suite

🕐 00:08:00

Code Review Guide

🕐 06:20:00

Unit 06: SQL INJECTION ATTACKS - EXPLOITATIONS

SQL Injection attacks - PDF

🕐 01:30:00

▶

Introduction to SQL Injection

🕐 00:16:00

▶

Dangers of SQL Injection

🕐 00:05:00

▶

Hunting for SQL Injection vulnerabilities

🕐 00:20:00

▶

In-band SQL Injection attacks

🕐 00:27:00

▶

Blind SQL Injection attack in-action

🕐 00:10:00

▶

Exploiting SQL injection - SQLMap

🕐 00:09:00

▶

Fuzzing for SQL Injection - Burp Intruder

🕐 00:14:00

Unit 07: CROSS SITE REQUEST FORGERY - XSRF

▶

CSRF or XSRF attack methods

🕐 00:12:00

▶

Anti-CSRF Token methods

🕐 00:15:00

▶

Anti-CSRF token stealing-NOT easy

🕐 00:11:00

Unit 08: AUTHENTICATION & AUTHORIZATION ATTACKS

▶

Authentication bypass-hydra

🕐 00:11:00

▶

HTTP Verb Tampering

🕐 00:09:00

▶

HTTP parameter pollution - HPP

🕐 00:06:00

Authentication

🕐 00:10:00

Unit 09: CLIENT SIDE SECURITY TESTING

▶

Client side control bypass

🕐 00:10:00

Unit 10: FILE RELATED VULNERABILITIES

▶

LFI & RFI attacks

🕐 00:13:00

▶

Unrestricted file upload - content type

🕐 00:06:00

▶

Unrestricted File Upload - Extension Type

🕐 00:06:00

▶

Remote code execution using Shell Uploads

🕐 00:09:00

Unit 11: XML EXTERNAL ENTITY ATTACKS - XXE

▶

XML Documents & database

🕐 00:14:00

▶

XXE attacks in action

🕐 00:14:00

Resources

▶

Advance intruder attack types

🕐 00:23:00

▶

Finding details with open source

🕐 00:17:00

Reviews

Recommended Courses