
Welcome and intro to the course.
What is a web application
Installing codex and claude code
Intro to web app reverse engineering
Understand what the ASLR Disabler web app does and how to deploy it
Reverse and clone the ASLR Disabler web app
Modify the ASLR Disabler app.
Install, run and test the PDF Converter web app.
Reverse engineer and clone the PDF Converter web app
Install and test the Suspicious File Analyzer web app.
Reverse engineer and clone the Suspicious File Analyzer web app
Install and test the Military Tower Defence web game
Reverse engineer and clone the Military Tower Defence web game
Intro to hacking web games
Hack a web based game to alter player's credits.
Understand what is AI-assisted web app penetration testing
Install OWASP Juice Shop to run locally.
Understand the 6 stages of penetration testing of a web app
Do reconnaissance and attack-surface mapping using AI.
Using AI to perform stage 2 Pen Test which is Identity, authentication and sessions testing
Do stage 3 penetration test, which is authorization and access-control tests, using AI.
Do stage 4 of pentest using AI.
Perform Stage 5: Client side and business logic tests
Perform Stage 6: OWASP ZAP automated testing
Continue your studies with these useful resources.
There are two broad categories of applications that we use every day. The first is native applications, which must be downloaded and installed on a computer. The second is web applications, which run in a browser and usually do not require installation. In this course, you will learn how to reverse engineer web applications and recreate their observable behaviour locally on your own computer. To make the learning process practical and engaging, we will first use Codex and Claude Code to build our own web applications and browser-based games. We will then approach those deployed applications as if we no longer have access to their original source code. Using AI coding agents, browser-development tools, and automation techniques, we will investigate how each application works and attempt to recreate it in a separate local project.
The course follows a practical and repeatable workflow:
Build the application using Vibe Coding, deploy it, remove access to the original source code, reverse engineer its behaviour, and recreate it locally.
You will begin with simple applications built using HTML, CSS, and vanilla JavaScript. As the course progresses, the applications will become increasingly complex and may include browser storage, minified JavaScript, frontend frameworks, APIs, databases, authentication, real-time communication, and browser-based games.
By mastering this process, you will develop a practical workflow for understanding and recreating many different types of web applications.
Besides that, we will also be using AI to do penetration testing of Web Applications.
What You Will Learn
By the end of the course, you will be able to:
Use Codex and Claude Code to build, test, debug, and deploy web applications
Investigate deployed applications without access to their original source code
Use Chrome DevTools and AI browser integrations to inspect HTML, CSS, JavaScript, network traffic, and browser storage
Discover and recreate APIs, authentication flows, WebSocket communication, and application behaviour
Reverse engineer browser-based games, including their scores, timers, state, and validation logic
Use CDP, Codex and Claude Chrome extensions to automate browser inspection and user workflows
Recreate applications locally and compare them with the originals using automated tests
Verify AI-generated apps, debug and fix errors
Do penetration testing on web applications
What Makes This Course Different
Many web-development courses teach you how to build applications.
Many reverse-engineering courses teach you how to inspect existing software.
This course combines both processes.
You will:
Build the original application
Deploy it
Investigate it without access to the source repository - assuming it is running on the web.
Reverse engineer its functions
Recreate it locally
Test the reconstruction
Reveal and compare the original implementation
Perform pentest (ethical hacking) on web applications
You will also see how modern AI coding agents can assist with both development and reverse engineering and cloning of web applications.
Join the Course
If you enjoy web development, reverse engineering, browser automation, AI coding agents, and AI assisted pentest or technical challenges, this course gives you the opportunity to combine all of them.
Join me as we use Codex and Claude Code to build, deploy, investigate, reverse engineer, pen-test and clone progressively more complex web applications and browser-based games.