Course Overview

You'll gain insight into the insecurities, vulnerabilities and exploits that lie within web applications so you can reduce the risk this poses to your business. This CREST Accredited course is based on OWASP Top 10 2017 and along with course Network Infrastructure Penetration Testing and Ethical Hacking will help students prepare for the CREST CRT examination.

  • 100% online course - Study anywhere, anytime – all you need is a reliable internet connection

  • CREST Accredited Training Course

  • Course Duration: 24 Hours

  • 24-hr remote access to a virtual lab allows you to learn, train and practice your skills in your own time.

  • Level: Intermediate

Course curriculum

    1. Introduction

    1. CWPT Lab

    1. Important HTTP Methods

    2. HTTP Status Codes

    3. Guided Exercise: Detecting HTTP Methods

    4. Guided Exercise: Exploiting the PUT Method

    5. Cookies

    6. Web Application Architecture

    7. OWASP Top 10

    1. Burp Proxy

    2. OpenVas

    3. Nikto, Wapiti

    4. Lab: Using Web Vulnerability Scanners

    5. Lab: Using Web Vulnerability Scanners (Solution)

    1. Nmap

    2. Metasploit Auxiliary Modules

    3. Lab: Scanning the Web Server

    4. Lab: Scanning the Web Server (Solution)

    1. Command Injection

    2. SQL Injection

    3. Guided Exercise: Authentication Bypass

    4. Lab: SQL Injection

    5. Lab: SQL Injection (Solution)

    6. Mitigation of Injection

About this course

  • Free
  • 75 lessons
  • 0 hours of video content
Watch Intro Video

Detecting HTTP Methods

Video

What is included in this course

  • High-quality videos with in-depth content

  • Modular structure – student-directed path

  • Knowledge Checks at end of each module and the course

  • Lab Guide including video Guided Exercises and answer files

  • 24x7 remote access to a virtual lab