Web App Penetration Testing

This course is for Absolute Beginners to Expert levels and Freshers out of College who want to start career with Web Security.

This course is for Absolute Beginners to Expert levels. A variety of applications with known Web Security vulnerabilities and Web App Penetration Testing.

1. Setting up a web app pentesting lab

2. Burp Suite

3. Testing for account enumeration and guessable accounts

4. Weak lock-out mechanisms

5. Testing for bypassing authentication schemes

6. Browser cache weaknesses

7. Testing the account provisioning process via REST API

8. Testing for directory traversal

9. Local File Include (LFI)

10. Remote File Include (RFI)

11. Testing for privilege escalation

12. IDOR

13. Testing session token strength using Sequencer

14. Testing for cookie attributes

15. Testing for session fixation

16. Exposed session variables

17. Cross-Site Request Forgery

18. Testing business logic data validation

19. Unrestricted file upload – bypassing weak validation

20. Performing process-timing attacks

21. Testing for the circumvention of workflows

22. Uploading malicious files – polyglots

23. Reflected cross-site scripting

24. Stored cross-site scripting

25. Testing for HTTP verb tampering

26. HTTP Parameter Pollution

27. Testing for SQL injection

28. Command injection

Web App Penetration Testing - Home LAB.

1 - How To Setup A Virtual Penetration Testing Lab

2 - Listening for HTTP traffic, using Burp

3 - Getting to Know the Burp Suite of Tools, Know the Burp Suite

4 - Assessing Authentication Schemes

5 - Assessing Authorization Checks

6 - Assessing Session Management Mechanisms

7 - Assessing Business Logic

8 - Evaluating Input Validation Checks

Above mentioned points will cover in this course which is help you to find Web Security Vulnerabilities and Web App Penetration testing