Academy
← All programs
WEB SECURITY / 30 MODULES

Web Penetration Testing

Thirty focused modules from web fundamentals to a full application penetration test.

A practitioner-led program covering modern web architecture, reconnaissance, authentication, access control, injection, APIs, business logic, browser trust, desynchronization attacks, cache abuse, and advanced vulnerability chaining. The program closes with a complete web application penetration test and professional report.

THE COMPLETE ROADMAP

What you’ll study

30 modules
  1. 01Introduction to Web Penetration TestingComing soon
  2. 02HTTP, HTTPS, DNS, and Web FundamentalsComing soon
  3. 03Modern Web Application ArchitectureComing soon
  4. 04Burp Suite Fundamentals and WorkflowComing soon
  5. 05Reconnaissance and Attack Surface DiscoveryComing soon
  6. 06Application Mapping and Testing MethodologyComing soon
  7. 07Authentication VulnerabilitiesComing soon
  8. 08Session Management and JWT SecurityComing soon
  9. 09Authorization and Access ControlComing soon
  10. 10SQL InjectionComing soon
  11. 11NoSQL Injection and Modern Injection FlawsComing soon
  12. 12Cross-Site Scripting (XSS)Coming soon
  13. 13CSRF, CORS, Clickjacking, and Browser TrustComing soon
  14. 14Server-Side Request Forgery (SSRF)Coming soon
  15. 15XML External Entity Injection (XXE)Coming soon
  16. 16OS Command InjectionComing soon
  17. 17Server-Side Template Injection (SSTI)Coming soon
  18. 18File Upload VulnerabilitiesComing soon
  19. 19Path Traversal and File Handling VulnerabilitiesComing soon
  20. 20Insecure Deserialization and Prototype PollutionComing soon
  21. 21OAuth 2.0 and OpenID Connect SecurityComing soon
  22. 22REST API Penetration TestingComing soon
  23. 23GraphQL Security TestingComing soon
  24. 24WebSocket and Real-Time Application SecurityComing soon
  25. 25Business Logic VulnerabilitiesComing soon
  26. 26Race Conditions and Concurrency FlawsComing soon
  27. 27HTTP Request Smuggling and DesynchronizationComing soon
  28. 28Web Cache Poisoning and Cache DeceptionComing soon
  29. 29Advanced Vulnerability Hunting and ChainingComing soon
  30. 30Final Web Application Penetration TestComing soon