Introduction to web application security testing

Why take this course

Web applications are one of the primary targets of cyberattacks. Lack of security testing can lead to serious data breaches and financial losses. This course will teach you how to identify vulnerabilities, verify them using professional tools, and apply penetration testing methodologies to effectively enhance application security.

What you’ll learn

• Identify and verify the most common web application vulnerabilities
• Apply penetration testing methodologies
• Use automated security scanning tools (Burp Suite, OWASP ZAP)
• Apply OWASP ASVS and OWASP Testing Guide standards in practice
• Analyze and report security testing results

Certification & Exam

Upon completion, you will receive a personalized certificate confirming your skills in web application security testing. There is no final exam – active participation in the sessions is sufficient.

Who is this course for

• Web application testers looking to expand their skills into security testing
• QA specialists and test engineers
• Developers interested in the security of the applications they create
• Individuals starting a career in penetration testing

Topics covered

• Elements of security tests
• OWASP ASVS and OWASP Testing Guide
• Methods of OWASP TOP 10 vulnerability verification
  • Injection
  • Broken Authentication
  • Sensitive Data Exposure
  • XML External Entities (XXE)
  • Broken Access Control
  • Security misconfigurations
  • Cross Site Scripting (XSS)
  • Insecure Deserialization
  • Using Components with known vulnerabilities
  • Insufficient logging and monitoring
• Tools for automated security scanning (Burp Suite, OWASP ZAP)