Introduction to web application security testing

Course objectives

Getting to know the most common web application vulnerabilities and methods of their verification.

Benefits

• Participants will get to know:
  • Elements of web application security tests
  • Elements of penetration testing methodology
  • Most popular vulnerabilities and methods of their verification
  • Examples of tools for automated vulnerability scanning

Training scope

• Elements of security tests
• OWASP ASVS and OWASP Testing Guide
• Methods of OWASP TOP 10 vulnerability verification
  • Injection
  • Broken Authentication
  • Sensitive Data Exposure
  • XML External Entities (XXE)
  • Broken Access Control
  • Security misconfigurations
  • Cross Site Scripting (XSS)
  • Insecure Deserialization
  • Using Components with known vulnerabilities
  • Insufficient logging and monitoring
• Tools for automated security scanning (Burp Suite, OWASP ZAP)

Audience

Testers of web applications who would like to develop their competence in cybersecurity testing.