Brochure
Enquire- OWASP Top 10 Vulnerabilities
- Threat Modelling Principle
- Site Mapping & Web Crawling
- Server & Application Fingerprinting
- Identifying the entry points
- Page enumeration and brute forcing
- Looking for leftovers and backup files
- Home
- Infosec Train
- Courses
- Web Application Penetration Testing Online Training Course
Web Application Penetration Testing Online Training Course
BY
Infosec Train
Become an expert in testing and exploiting the security of web and mobile apps with the Web Application Penetration ...Read more
Online
Quick Facts
| particular | details | |||
|---|---|---|---|---|
|
Medium of instructions
English
|
Mode of learning
Self study, Virtual Classroom
|
Mode of Delivery
Video and Text Based
|
Course overview
The Web Application Penetration Testing course by Infosec Train is developed to teach the nuances of web app penetration testing in immersive environments. Infosec Train’s trainers are industry experts and will imbue you with skills like information gathering, web application analysis, and enumeration to add to your skill tree.
Moreover, with the Web Application Penetration Testing online course, you also get access to Infosec Train’s in-house cloud-hosted lab environment for hands-on penetration testing experience. You will be offered access to an app that will demonstrate vulnerability commonly found in a mobile or web app. This practical exposure will help you assess the app and exploit it like an experienced professional.
By the end of the Web Application Penetration testing programme, you will be able to find vulnerabilities in source code efficiently. You will also master how to defend and exploit web and mobile apps, and perform static and dynamic app analysis.
The highlights
- Hands-on exposure with various vulnerabilities
- Access to a cloud-hosted lab environment
- 40 hours of instructor-led training
- Expert certified instructors
- Real-life scenarios for practical understanding
- Flexible schedule
- Access to recorded sessions
Program offerings
- Access to cloud-based labs
- Hands-on exposure
- 40+ hours of learning material
- Certified trainers
- Real-life scenarios for practical understanding.
Course and certificate fees
certificate availability
Yes
certificate providing authority
Infosec Train
Who it is for
The Web Application Penetration Testing programme offers immense value for:
- Application developers
- Web administrators
- Penetration testers
- Security analysts
Eligibility criteria
It’s recommended that you have at least one year of work experience in an information security role before enrolling in the Web Application Penetration testing online course. Also, it’s recommended that you know basic HTML, HTTP, JavaScript, and PHP.
What you will learn
Web application development skills
Upon completing the Web Application Penetration testing course, you will be proficient in methodologies like:
- Finding vulnerabilities in source code
- Types of vulnerabilities
- Web application assessment
- Defending and exploiting web and mobile apps
- Static and dynamic app analysis
- Exploit weaknesses of web application security
- Insecure file handling
- Information leaks
The syllabus
Web Application Assessment
Authentication vulnerabilities
- Authentication scenarios
- User enumeration
- Guessing passwords – Brute force & Dictionary attacks
- Default users/passwords
- Weak password policy
- Direct page requests
- Parameter modification
- Password flaws
- Locking out users
- Lack of SSL at login pages
- Bypassing weak CAPTCHA mechanisms
- Login without SSL
Authorisation vulnerabilities
- Role-based access control (RBAC)
- Authorization bypassing
- Forceful browsing
- Client-side validation attacks
- Insecure direct object reference
Improper Input Validation & Injection vulnerabilities
- Input validation techniques
- Blacklist VS. Whitelist input validation bypassing
- Encoding attacks
- Directory traversal
- Command injection
- Code injection
- Log injection
- XML injection – XPath Injection | Malicious files | XML Entity
- bomb
- LDAP Injection
- SQL injection
- Common implementation mistakes – authentication
- Bypassing using SQL Injection
- Cross Site Scripting (XSS)
- Reflected VS. Stored XSS
- Special chars – ‘ & < >, empty
Insecure file handling
- Path traversal
- Canonicalization
- Uploaded files backdoors
- Insecure file extension handling
- Directory listing
- File size
- File type
- Malware upload
Session & browser manipulation attacks
- Session management techniques
- Cookie based session management
- Cookie properties
- Cookies – secrets in cookies, tampering
- Exposed session variables
- Missing Attributes – httpOnly, secure
- Session validity after logoff
- Long session timeout
- Session keep alive – enable/disable
- Session id rotation
- Session Fixation
- Cross Site Request Forgery (CSRF) – URL Encoding
- Open redirect
Information leak
- Web Services Assessment
- Web Service Testing
- OWASP Web Service Specific Testing
- Testing WSDL
- Sql Injection to Root
- LFI and RFI]
- OWASP Top 10 Revamp
Admission details
- Visit the Web Application Penetration Testing programme website.
- Select your preferred learning mode by scrolling down.
- Fill in the pop-up form that appears on the screen after you hit “Enroll Now”
- Submit the form. Infosec Train will get in touch with you shortly to discuss the further admission steps.
Filling the form
Your name, country name, email address, and phone number are all you have to enter while filling the short contact form. On the other hand, if you wish to enroll for the Web Application Penetration Testing online training as a corporate entity, you also need to specify your company name and employee size.
How it helps
By enrolling in the Web Application Penetration Testing online training, you get access to quality courseware - delivered by expert instructors - that will make you an expert in penetration testing in no time. Hands-on coaching is also provided on Infosec Train’s proprietary cloud-based lab, where you can put newly learned skills to practice.
By the course’s end, you will be more than proficient at handling testing and exploits and can apply for lucrative job roles across various industries.
Instructors
FAQs
Where is the hands-on training conducted?
Hands-on training is conducted on Infosec Train’s in-house cloud-based lab.
How many hours of courseware do I receive access to?
You get access to 40+ hours of expert-led training.
Is the course accredited?
Yes, the Web Application Penetration Testing programme is accredited by Infosec Train.
Which learning modes can I choose from?
Online training, One-to-One training, and Corporate training – these are the three training modes you can choose from.
Do I need to have coding experience?
Yes. Basic HTML, PHP, HTTP, and JavaScript programming experience is recommended.
Articles
Popular Articles
prev
next
