Web Application Penetration Testing
About:
This module equips students with the skills to identify, exploit, and secure vulnerabilities in web applications. Through real-world tools and guided labs, learners gain hands-on experience in testing and protecting applications against modern threats.
01
Learn the basics of HTML, HTTP, and client–server communication to understand how web apps are built and where potential weaknesses lie.
02
Work with tools like Burp Suite to intercept requests, manipulate inputs, and scan applications for hidden flaws.
03
Discover methods to map and profile applications by collecting data such as directories, parameters, and backend technologies.
04
Study the OWASP Top 10 and SANS 25 risks, including authentication flaws, access control issues, and injection vulnerabilities that pose the greatest threats to web apps.
05
Practice attacks such as SQL Injection, XSS, CSRF, and HTML Injection in a safe lab environment, while also learning secure coding and configuration techniques to prevent them.
06
Understand how poor session management can expose users to hijacking and how SPF/DMARC misconfigurations make emails vulnerable to spoofing and phishing.