Introduction
CyResLab has designed this specialized course for QA professionals, focusing on the crucial area of web application security. This course shifts the focus from secure coding practices to the critical skill of security defect detection and analysis (triage). You’ll gain the knowledge and tools needed to effectively identify and assess vulnerabilities within web applications.
Course Objectives
- Master the Top Threats: Gain comprehensive understanding of the ten most critical web application security threats.
- Detection and Triage Expertise: Learn the tactics and tools used to effectively identify and analyze security vulnerabilities.
- Hands-on Practice: Participate in attack demonstrations, vulnerability exercises, and gain practical experience using detection tools.
Course Structure
This intensive one-day course is designed to be highly practical and technical. It includes:
- In-depth Coverage:
- Network and Cryptography Fundamentals
- Injection Attacks
- Broken Authentication and Authorization
- Sensitive Data Exposure
- XML External Entities (XXE)
- Broken Access Control
- Security Misconfigurations
- Cross-Site Scripting (XSS)
- Insecure Deserialization
- Using Components with Known Vulnerabilities
- Insufficient Logging & Monitoring
- Denial-of-Service (DoS) Attacks
- Development Process Security Tips
- Interactive Exercises: Access a dedicated online environment for one week after the course to solidify your learnings through hands-on practice.
- Q&A: Participate in an interactive session to address your questions and gain further insights.
Ideal for
This course is ideal for both Junior and Senior QA specialists seeking to enhance their web application security expertise.
Prerequisites
A solid understanding of web technologies is essential for this course.
Technical Requirements – Participants should bring a laptop/notebook with a modern web browser supporting JavaScript and AJAX functionalities.
Certification
Upon successful completion, attendees will receive a certificate from ESI CEE.