CEH · eJPT · OSCP+ Intermediate Certificate

Web Application Security

The largest module in the level, because the web is where most real access begins. A full web-assessment methodology with Burp Suite: enumeration, the OWASP Top 10, directory traversal, file inclusion and upload, command injection, and the client-side and access-control flaws that turn a login page into a foothold.

12 lessons 630 min

Web
OWASP
Burp Suite
CEH
eJPT
OSCP+

Skills

What You Will Learn in This Course

Run a structured web assessment with Burp Suite.

Enumerate hidden files, directories and CMS installations.

Test for and understand the OWASP Top 10 in a lab.

Exploit LFI/RFI, directory traversal, file upload and command injection.

Analyse headers, cookies, source and APIs for weaknesses.

About This Course

Requirements

Networking and HTTP.

Who It Is For

Every tester; web skills are non-negotiable.

Curriculum

Course Content

12 items · 1 sections

01 Web assessment methodology and Burp Suite Preview 55 min
02 Web recon and directory enumeration: Gobuster, Nikto 50 min
03 CMS security and WordPress testing 45 min
04 The OWASP Top 10 60 min
05 Cross-site scripting (XSS) 55 min
06 Directory traversal and LFI/RFI 55 min
07 File upload vulnerabilities 50 min
08 Command injection 50 min
09 Headers, cookies, source code and API testing 50 min
10 Access control and client-side controls 45 min
11 Brute-force login and authentication flaws 45 min
12 Lab: web enumeration to shell 70 min

Certified

Certificates You Can Earn

Finish your course and receive an accredited MotiGraph certificate you can add to your CV and share with employers.