Web Application Penetration Testing

Module 1: Web Application Pentest Methodology

• OWASP Testing Guide (OTG) v4
• PTES for web applications
• Bug bounty vs. penetration testing
• Scoping web application assessments
• Legal considerations and authorisation

Module 2: Web Application Reconnaissance

• Technology fingerprinting: Wappalyzer, WhatWeb
• Directory and file enumeration: Gobuster, ffuf, Dirbuster
• Parameter discovery: Arjun, ParamSpider
• Subdomain enumeration for web scope
• JavaScript file analysis for secrets and endpoints

Module 3: Authentication Testing

• Username enumeration
• Password policy bypass
• Brute force with Hydra and Burp Intruder
• Multi-factor authentication bypass techniques
• JWT attacks: Algorithm confusion, none algorithm, secret brute force

Module 4: Injection Attacks

• SQL injection: In-band, blind, time-based, OOB
• SQL injection with SQLMap
• NoSQL injection: MongoDB
• Command injection and OS command execution
• LDAP and XPath injection

Module 5: Cross-Site Scripting (XSS)

• Reflected, stored, and DOM-based XSS
• XSS filter bypass techniques
• XSS exploitation: Cookie stealing, keylogging
• XSS for account takeover
• Content Security Policy (CSP) bypass

Module 6: Access Control and Business Logic

• Horizontal and vertical privilege escalation
• IDOR (Insecure Direct Object Reference) vulnerabilities
• Mass assignment vulnerabilities
• Business logic flaw identification
• API access control testing

Module 7: Server-Side Vulnerabilities

• SSRF: Basic to advanced with cloud metadata abuse
• XXE injection: File read, SSRF, blind XXE
• Template injection: SSTI in Jinja2, Twig, FreeMarker
• Path traversal and file inclusion
• Deserialization: Java, PHP, Python

Module 8: API Security Testing

• REST and GraphQL API testing
• API enumeration with Postman and ffuf
• OWASP API Security Top 10
• BOLA/BFLA vulnerabilities
• Mass assignment in REST APIs

Module 9: Burp Suite Professional Mastery

• Burp Proxy, Repeater, Intruder advanced usage
• Burp Scanner and active scanning
• Burp extensions: ActiveScan++, Param Miner, Turbo Intruder
• Custom Burp macros
• Collaborator for out-of-band testing

Module 10: Modern Web Attack Techniques

• HTTP request smuggling
• Web cache poisoning
• OAuth 2.0 vulnerabilities
• Host header injection
• Prototype pollution

Module 11: Reporting and Remediation

• CVSS scoring for web vulnerabilities
• Writing clear vulnerability descriptions with PoC
• Remediation recommendations for developers
• Bug bounty report writing
• Re-testing and verification

Module 12: Capstone Projects

• Full web application pentest of DVWA, Juice Shop, WebGoat
• Bug bounty practice on HackerOne and Bugcrowd public programmes
• Professional pentest report writing
• Certification preparation: BSCP (Burp Suite Certified Practitioner), OSWA, eWPT
• Web app pentester career roadmap

Experience in the Industry Learn from web application security professionals with active bug bounty research and enterprise web penetration testing experience across banking, e-commerce, and SaaS platforms.

Backgrounds at the Top Our instructors have conducted web application security assessments for Fortune 500 companies, Indian unicorn startups, and government portals, with recognised bug bounty hall of fame recognitions.

Clear & Effective Teaching Each OWASP Top 10 vulnerability and advanced web attack is demonstrated step by step in realistic lab environments, with the developer's perspective included for context.

Hands-On Learning Focus Students exploit real vulnerabilities in DVWA, Juice Shop, PortSwigger Web Security Academy labs, and custom applications, building a portfolio of documented findings.

Up-to-Date Knowledge Instructors stay current with OWASP Top 10 2021, PortSwigger research, new JWT attack techniques, and the latest HTTP protocol vulnerabilities.