Description

Price: 5.00 USD | Size: 1.82 GB | Duration : 2.37 Hours | 23 VideoLessons |

BRAND: Expert TRAINING | ENGLISH | INSTANT DOWNLOAD | 4.9

Web Application Pentesting Learning Path

Name: Web Application Pentesting Learning Path Course
SKU: 7570
Availability: InStock

Learn the essentials for becoming a web app pentester.

About Web Application Pentesting

The first course in the learning path covers workstation setup, including installation and configuration of Burp Suite with the Firefox web browser. Certificate installation and proxy configurations are covered in order to allow newcomers to start pentesting immediately. The second course makes up the bulk of this learning path and focuses on the OWASP Top Ten vulnerabilities. Many real-world vulnerabilities are showcased for each of the ten topics and various demos are given on how to solve related challenges in both OWASP Juice Shop and Portswigger’s Web Security Academy. The third course covers a variety of pentesting tools and Burp extensions such as Turbo Intruder, Intruder File Payload Generator, SQLMap and many more. The fourth course closes out the learning path with pentesting advice, a path recap and a look at the final project.

Syllabus

1. Introduction to web application pentesting
1. Flex Introduction
2.. Flex Introduction to Pentesting Process and Terminologies
3. Flex Introduction to Web Application Pentesting

2. Target Identification and application mapping
1. Flex Passive Intelligence Gathering
2. Flex Service Identification
3. Flex How Servers and Apps Communicate
4. Flex Core Defense Mechanisms
5. Flex Burpsuite
6. Flex Mapping Applications

3. Attacking web application access controls
1. Flex Attacking Access Control
2. Flex Attacking Authentication
3. Flex Attacking Session Management
4. Flex Bypassing Client-Side Controls

4. Injection attacks
1. Flex SQL Injection
2. Flex Code Injection

5. Common attack methods
1. Flex Clickjacking
2. Flex Attacking Web Services SOAP
3. Flex Cross Site Scripting
4. Flex Directory Traversal
5. Flex Local and Remote File Inclusion
6. Flex Other Web Attacks
7. Flex WebApp Hacker Toolkit
8. Flex Securing Web Apps