Who Should Attend

• Security enthusiasts
• Anybody who wishes to make a career in this domain and gain some knowledge of networks and applications
• Web Developers
• System Administrators
• SOC Analysts
• Network Engineers
• Pen Testers who are wanting to level up their skills

Prerequisites

Delegates should bring their laptop with windows operating system installed (either natively or running in a VM). Further, Delegates must have administrative access to perform tasks such as installing software, disabling antivirus etc. Devices that don’t have an Ethernet connection (e.g. MacBook Air, tablets etc.) will not be supported during the course.

Course Outline

UNDERSTANDING THE HTTP PROTOCOL

• HTTP Protocol Basics
• Introduction to proxy tools

INFORMATION GATHERING

• Enumeration Techniques
• Understanding Web Attack surface

USERNAME ENUMERATION & FAULTY PASSWORD RESET

• Attacking Authentication and Faulty Password mechanisms

ISSUES WITH SSL/TLS

• SSL/TLS misconfiguration AUTHORIZATION BYPASS
• Logical Bypass techniques
• Session related issues

CROSS SITE SCRIPTING (XSS)

• Various types of XSS
• Session Hijacking & other attacks

CROSS SITE REQUEST FORGERY (CSRF)

• Understanding CSRF attack SQL INJECTION
• SQL Injection types
• Manual Exploitation

XML EXTERNAL ENTITY (XXE) ATTACKS

• XXE Basics
• XXE exploitation INSECURE FILE UPLOADS
• Attacking File upload functionality

DESERIALIZATION VULNERABILITIES

• Serialization Basics
• PHP Deserialization Attack

What will this course cover?

To view the full course outline please click here

Refunds

Refunds available if notice is given before at least 7 days before the event date