Overview What You Will Learn Curriculum Instructor

Course Overview

This course provides developers with an in-depth understanding of web application security from an attacker's viewpoint. By focusing on the OWASP standards, this course equips learners with the skills to identify and address common security vulnerabilities found in modern web applications, ensuring they are better prepared to build secure code and defend against potential threats. 

This course begins with a brief introduction and agenda, followed by an extensive overview of web penetration testing, covering information gathering, scanning, and enumeration techniques. Participants will learn how to exploit various vulnerabilities like XSS (Reflected and Stored), CSRF, OS Command Injection, and SQL Injection. It also covers the OWASP API and Web Top 10 vulnerabilities, emphasizing how to identify and exploit them. Additional topics include HTTP security headers, JSON Web Tokens, cryptography, and technical measures for best practices in security. 

By the end of this course, you will have a solid understanding of offensive security techniques and how to secure your applications against OWASP vulnerabilities. 

What You Will Learn

  • Explore Secure WordPress Websites.
  • Best practices when it comes to secure coding for web developers.
  • Dive deep into the OWASP Top 10 Web vulnerabilities.
  • "Out-of-box thinking" when it comes to exploiting certain vulnerabilities.
  • Learn certain tools and frameworks for offensive perspective.

Program Curriculum

Agenda

  • Overview of Web Penetration Testing
  • Information Gathering - Part 1
  • Information Gathering - Part 2
  • Information Gathering - Part 3
  • Scanning and Enumeration
  • Mapping
  • Attacking the Users - Reflected XSS
  • Attacking the Users - Stored XSS
  • Attacking the Users - CSRF, Clickjacking, Open Redirect
  • Attacking the Server - OS Command Injection
  • Attacking the Server - SMTP Injection
  • Attacking Authentication
  • Attacking the Datastore (SQLi) - Part 1
  • Attacking the Datastore (SQLi) - Part 2
  • Chapter 2 Quiz

  • API OWASP Top 10 - Part 1
  • API OWASP Top 10 - Part 2
  • Chapter 3 Quiz

  • Web OWASP Top 10
  • Chapter 4 Quiz

  • HTTP Security Headers
  • Chapter 5 Quiz

  • JSON Web Tokens
  • Chapter 6 Quiz

  • Technical Measures and Best Practices - Part 1
  • Technical Measures and Best Practices - Part 2

  • Cryptography - Part 1
  • Cryptography - Part 2
  • Chapter 8 Quiz
Load more modules

Instructor

Gabriel Avramescu

Gabriel Avramescu is a Senior Information Security Consultant and an IT Trainer with certifications like OSWE (Offensive Security Web Expert), CREST Registered Penetration Tester (CRT), ECIH (EC-Council Incident Handling), Ec-Council ICS-SCADA Cybersecurity, OSCE (Offensive Security Certified Expert), OSWP (Offensive Security Wireless Professional), OSCP (Offensive Security Certified Professional), CHFI (Computer Hacking Forensic Investigator), ISO 270001 Lead Auditor, ECSA (EC-Council Security Analyst), CEH (Certified Ethical Hacker), CCNA and CCNA Security, CCNP Routing and CCNP Switching, Advanced Linux&InfoSEC, VMWare vSphere Install, Configure, Manage, and Microsoft Certified Technology Specialist (MCTS/MCP 70-642): Microsoft Windows Server 2008 Network Infrastructure, etc.

Join over 1 Million professionals from the most renowned Companies in the world!

certificate

Choose the Pro Plan That Fits Your Learning Journey

Invest in your future with flexible Pro subscription plans. Whether you're starting your cybersecurity journey or expanding your expertise, choose the membership duration that works for you and gain access to our complete learning platform.

Monthly Plans
Annual Plans
Save 20% with our annual plans!

Pro

Ideal for continuous learning, offering extensive resources with 900+ courses and diverse Learning Paths to enhance your skills.

$ 599.00
Billed annually or $69.00 billed monthly
Get Started Now
Start your 7-day trial for $1

What is included

  • Access to 900+ Premium Short Courses
  • 70+ Structured Learning Paths
  • Validation of Completion with All Courses and Learning Paths
  • New Courses Added Every Month
Early Access Offer

Pro +

Experience immersive learning with Practice Labs and CTF Challenges for comprehensive skill-building.

$ 699.00
Billed annually or $79.00 billed monthly
Get Started Now
Start your 7-day trial for $1

Everything in Pro and

  • 500+ Practice Labs with Guided Instructions
  • 400+ CTF Challenges with Detailed Walkthroughs
  • New Practice Labs and Challenges Added Every Month

Related Courses

  • Bootstrap 4 Quick Website Bootstrap Components Course
    Short Course

    Bootstrap 4 Quick Website Bootstrap Components Course

    Software Development

    Explore the basics of Bootstrap and learn to create a website...

    $49.99

    Beginner

    1 hr 30 m

  • CCNA - Understanding Routers and Switches
    Short Course

    CCNA - Understanding Routers and Switches

    Security Architecture and Operations

    A comprehensive guide to understanding the in-depth functioni...

    $49.99

    Intermediate

    2 hr 0 m

  • The Complete Full-Stack JavaScript Course
    Short Course

    The Complete Full-Stack JavaScript Course

    Software Development

    Learn full-stack web development using JavaScript (ReactJS, N...

    $79.99

    Beginner

    24 hr 17 m

  • React.JS for Ecommerce: Building a Store with React.JS
    Short Course

    React.JS for Ecommerce: Building a Store with React.JS

    DevSecOps

    From React.js Fundamentals to Crafting an Online Storefront

    $49.99

    Advanced

    3 hr 30 m

  • CISSP Certification Domains 5, 6, 7, and 8 Video Training
    Short Course

    CISSP Certification Domains 5, 6, 7, and 8 Video Training

    Cybersecurity

    This course is ideal for individuals who desire to pass the I...

    $69.99

    Intermediate

    6 hr 30 m

  • Helm 3 - Package Manager for Kubernetes
    Short Course

    Helm 3 - Package Manager for Kubernetes

    Software Development

    A must tool for every DevOps engineer

    $49.99

    Intermediate

    1 hr 27 m

  • Learn Ethical Hacking by Hacking Real Websites Legally
    Short Course

    Learn Ethical Hacking by Hacking Real Websites Legally

    Vulnerability Assessment and Pentesting

    Fun way to learn ethical hacking by playing online hacking ga...

    $69.99

    Beginner

    4 hr 18 m

  • Mastering Ansible Playbooks: Debugging and Security
    Short Course

    Mastering Ansible Playbooks: Debugging and Security

    Software Development

    Securing and Automating Linux and Windows Systems with Advanc...

    $99.99

    Advanced

    5 hr 34 m

1 50
View all