Hacking Web Applications

Throughout this hands-on course, you’ll gain the knowledge and skills needed to identify vulnerabilities in websites and learn how hackers exploit them. With step-by-step guidance, real-world examples, and practical exercises, you’ll develop the skills necessary to protect websites and web applications from the most common online threats. By the end of this course, you'll feel confident in your ability to understand and prevent attacks, laying a solid foundation for a future career in cybersecurity. This course focuses on practical skills you can use straight away. You are expected to have basic knowledge and understanding of web technologies and concepts that are covered in the beginner level course.

What you will learn

• Recon and enumeration: subdomains, directories and files, parameter fuzzing, technology stack and business logic mapping

• Login and session attacks: credential attacks, rate-limit bypass, MFA weaknesses, session hijacking, fixation and cookie poisoning

• Broken access control and IDOR, with horizontal and vertical privilege checks

• Client-side attacks: reflected, stored and DOM-based XSS, HTML injection, CSRF and open redirects

• Back-end attacks: SQL injection, OS command injection and SSRF

• Finding and attacking weaknesses in content management systems (CMS)

• A hands-on lab for each part, including XSS and CSRF testing in Burp Suite

The sections follow the order of web app penetration testing in real work, from recon to exploitation.

Who is this course for?

• Penetration testers

• Web developers

• SOC analysts