Course Summary

This course familiarises you with a wealth of tools and techniques required to breach and compromise the security of web applications.
The course starts by discussing the very basics of web application concepts, and gradually builds up to a level where you can not only use the tools and techniques to hack various components involved in a web application, but also walk away with a solid understanding of the concepts on which these tools are based.

The course will also talk about industry standards such as OWASP Top 10 and PCI DSS which form a critical part of web application security. Numerous real life examples will be discussed during the course to help you understand the true impact of these vulnerabilities.

Trained delegates can:

• Confidently articulate the intricacies of the HTTP protocol and how it can be manipulated to achieve a malicious goal.
• Understand how to use industry-standard tools, such as Burpsuite, to perform manual penetration testing against web applications.
• Find and exploit vulnerabilities in web applications, including those that would lead to injection attacks, authorisation and bypass authentication, malicious file uploads, and more.
• Identify the infrastructure and frameworks underlying a web attack surface.
• Understand complications related to cryptography and the effect on web applications.
• Understand how to tie security testing and other offensive and defensive measures back to authentic attack vectors.