Web Application Security & Penetration Testing
All Courses
Cybersecurity
intermediate

Web Application Security & Penetration Testing

4.9
5,290 students
4h 0m
16 lessons

About this course

Learn how web applications are actually hacked — and how to defend them. This course covers the OWASP Top 10, SQL injection, XSS, CSRF, authentication bypass, and modern attacks on APIs. Use Burp Suite and other tools to find and exploit vulnerabilities in deliberately vulnerable labs, then apply the defensive fixes.

Course Content

The Attack Surface

  • The OWASP Top 10 Overview15min
  • Burp Suite: Intercepting and Modifying Traffic15min
  • Reconnaissance and Enumeration15min
  • How the Web Works: HTTP, Sessions, Cookies15min

Injection Attacks

  • SQL Injection: Union, Blind, and Error-Based15min
  • Cross-Site Scripting (XSS) Deep Dive15min
  • Project: Exploit a Vulnerable App15min
  • Command Injection and Path Traversal15min

Authentication and API Security

  • Securing REST and GraphQL APIs15min
  • JWT Attacks and Token Hardening15min
  • Broken Authentication and Session Hijacking15min
  • CSRF and SSRF Attacks15min

Defense and Reporting

  • Writing a Penetration Test Report15min
  • Responsible Disclosure and Bug Bounties15min
  • Secure Coding Practices15min
  • Web Application Firewalls (WAF)15min