This course has been developed with a clear objective: show in practice what it means to perform a Web Application Penetration Test (WAPT), exactly as it would happen with a real client in a typical week of work. This approach will allow you to quickly reach the experience level of a junior penetration tester.
Consider these questions:
- Are you interested in working in the security industry?
- Do you want to learn how to test the security of a Web Application?
- Do you like hands-on, practice-based learning?
If you answered yes to these questions, then this course is for you.
In this course, we will show how to test the security of Secure Bank, a home banking application designed as a training ground for penetration testers and web developers. During the test we will find 40+ security issues belonging to the following categories:
- Information Disclosure
- Injection Vulnerabilities
- Authentication
- Authorization
- Session Management
- Business Logic Vulnerabilities
- Data Validation Vulnerabilities
- Cryptography
- Insecure Configuration
For each security issue we will show how to find the vulnerable behavior, how to exploit it and finally how to explain it using written Proof of Concepts (PoCs) to the final client. At the end of the course you will see 40 different PoCs for 40 different vulnerabilities. This should give you a very good intuition on WAPT testing, something that will help you to get started in the industry or to simply refine your skills in case you need to.
