Web Application Penetration Testing
Web applications are an integral part of today's world and web applications are there in nook and cranny of any organization from human resource management to share market. So its imperative that security of these applications plays an important of the business hence our course. In this in-depth training course you will learn the art of exploiting and securing the web applications.Duration: 40hrs
Course Content:
Introduction To Web application
Basics
HTTP Protocol
Web servers and clients
Server-side and Client-side security controls
Types of web application security testing
Reconnaissance
Burpsuite,OWASP ZAP
Injections
Cross-site Scripting
Cross-site Request Forgery
Authentication Testing
Authorization Testing
Session Management
Security Misconfiguration
Missing functional level access controls
SSL & Configuration testing
Session Management testing
Brute force web applications
Parameter Manipulation
Other Attacks
Web application Penetration Testing Tools
Samurai WTF
Firefox security Add-ons
VAPT Methodologies
Documentation & Reporting