Web Protocols 3 Topics | 1 Quiz

Expand

Lesson Content

0% Complete 0/3 Steps

Hypertext Transfer Protocol

Methodologies

Burp Suite

Web Protocols

Web Frameworks 12 Topics | 1 Quiz

Expand

Lesson Content

0% Complete 0/12 Steps

Content Management System

Languages and Frameworks

Reconnaissance 9 Topics | 1 Quiz

Expand

Lesson Content

0% Complete 0/9 Steps

Search Engine Discovery

Fingerprint Web Server

Review Webserver Metafiles

Enumerate Applications

Review Webpage Content

Identify Application Entry Points

Map Execution Paths

Fingerprint Web Application Framework

Map Application Architecture

Reconnaissance

Open Source Intelligence 2 Topics | 1 Quiz

Expand

Lesson Content

0% Complete 0/2 Steps

Infrastructure

People Investigation

Open Source Intelligence

Misconfiguration 12 Topics | 1 Quiz

Expand

Lesson Content

0% Complete 0/12 Steps

Network Configuration

App Platform Configuration

File Extensions Handling

Review Old Backup

Enumerate Admin Interfaces

HTTP Methods

HTTP Strict Transport Security

RIA Cross Domain Policy

File Permission

Subdomain Takeover

Cloud Storage

Content Security Policy

Misconfiguration

Identity Management 5 Topics | 1 Quiz

Expand

Lesson Content

0% Complete 0/5 Steps

Broken Authentication 10 Topics | 1 Quiz

Expand

Lesson Content

0% Complete 0/10 Steps

Credentials Encrypted Channel

Default Credentials

Weak Lock Out Mechanism

Bypassing Authentication Schema

Vulnerable Remember Password

Browser Cache Weaknesses

Weak Password Policy

Weak Security Question Answer

Weak Password Reset Functionalities

Weaker Authentication in Alternative Channel

Broken Authentication

Broken Authorization 5 Topics | 1 Quiz

Expand

Lesson Content

0% Complete 0/5 Steps

Directory Traversal File Include

Bypassing Authorization Schema

Privilege Escalation

Insecure Direct Object References

OAuth Weaknesses

Broken Authorization

Session Management 10 Topics | 1 Quiz

Expand

Lesson Content

0% Complete 0/10 Steps

Session Management Schema

Cookies Attributes

Session Fixation

Exposed Session Variables

Cross Site Request Forgery

Input Validation 21 Topics | 1 Quiz

Expand

Error Handling 2 Topics | 1 Quiz

Expand

Lesson Content

0% Complete 0/2 Steps

Improper Error Handling

Stack Traces

Error Handling

Weak Cryptography 4 Topics | 1 Quiz

Expand

Lesson Content

0% Complete 0/4 Steps

Weak Transport Layer Security

Padding Oracle Attack

Information Unencrypted Channel

Weak Encryption

Weak Cryptography

Business Logic 9 Topics | 1 Quiz

Expand

Lesson Content

0% Complete 0/9 Steps

Logic Data Validation

Ability to Forge Requests

Integrity Checks

Process Timing

Race Conditions

Circumvention of Work Flows

Defenses Against Application Misuse

Upload of Unexpected File Types

Upload of Malicious Files

Business Logic

Client Side 15 Topics | 1 Quiz

Expand

Lesson Content

0% Complete 0/15 Steps

DOM-Based Cross Site Scripting

JavaScript Execution

HTML Injection

Client Side URL Redirect

CSS Injection

Client Side Resource Manipulation

Cross Origin Resource Sharing

Client Side Template Injection

Cross Site Script Inclusion

Reverse Tabnabbing

Client Side

API Attacks 10 Topics | 1 Quiz

Expand

Lesson Content

0% Complete 0/10 Steps

Broken Object Level Authorization – API

Broken Authentication – API

Excessive Data Exposure – API

Lack of Resources and Rate Limiting – API

Broken Function Level Authorization – API

Mass Assignment – API

Security Misconfiguration – API

Injection Attack – API

Improper Assets Management – API

Insufficient Logging and Monitoring – API

API Attacks

CTF for Web

Web Penetration Testing

Course Content

Invite & Earn

Web Penetration Testing

Course Content

Invite & Earn

Available Coupon