التخطي إلى المحتوى

Web Application Security Assessment

ما ستتعلمه

This learning path will teach you how to scan your organizations' or beneficiaries' websites for potential vulnerabilities.

آخر تحديث في: 23 أغسطس 2024

وحدات

لوريم إيبسوم دولور سيت أميت بلاه.

ابدأ هنا

Introduction

Read the learning path overview, objectives, associated threats, and prerequisites

وحدة 1

Setup

We introduce and set up some key web security assessment tools

وحدة 2

Data Validation

Every web application accepts and processes untrusted input. Here we learn how to discover common vulnerabilities that take advantage thereof

وحدة 3

Authentication and Authorization

Many web apps will only allow particular users to view certain pieces of content and require them to log in or prove their identity in other ways. This subtopic looks into authentication and authorization, and possible vulnerabilities therein

وحدة 4

Application Logic and Related Vulnerabilities

There exist other types of vulnerabilities not covered in the above subtopics which could nonetheless be used to damage or gain unauthorized entry into a web app. We look at several of those

وحدة 5

Finding Web Application Vulnerabilities

Once you have learned about different types of vulnerabilities, it's time to look for them in the web applications you are testing! To start with and get some initial practice, you will test a deliberately vulnerable web application

وحدة 6

Refining Your Web Application Testing Process

Once you’ve figured out the fundamentals of finding vulnerabilities in websites, this subtopic will teach you a process to find those vulnerabilities more quickly and efficiently

وحدة 7

Automatic Vulnerability Discovery

In past subtopics, we looked at how to discover vulnerabilities by hand. Here, we explore tools that can help automate that process

وحدة 8

Next Steps

How to continue practicing and honing your web security assessment skills