DEVELOPER 538

Intro to Pen Testing Web Apps

This course is a hands on course, it is crucial that attendees follow the laptop requirements and bring their laptops to class ready to participate.

If your organization has a web application (who doesn't), it is probably under attack every single day. We regularly come across headlines of online retailers, social sites and banks' websites getting compromised. Successful attacks against websites using application level flaws are very common nowadays. Would you want hackers to be the first to test the security posture of your critical web applications? If you don't, security testing for web application during and after development is absolutely necessary. This two day course starts off with a discussion on software security testing and how it fits into the development lifecycle. We will discuss testing methodologies that are sensible and practical, so you can apply these testing concepts to any of your web applications.

Testing web applications manually can be very time consuming and not very practical. To ensure you feel confident about testing web applications, we introduce you to many web application security testing tools. We will fill your arsenal with the right tools to get the job done.

Throughout the two days, you will be using the testing concepts learned in class to test some vulnerable web applications. The target applications are as realistic as possible. The labs are structured so the novice and the intermediate students can both enjoy the learning experience . you will not be bored during the labs. This class gives you the know-how to test common vulnerabilities in web applications so you can hit the ground running when it comes to testing web application's security posture.

Course Prerequisites

This course assumes an understanding of web applications vulnerabilities. SANS SEC519 course (Web Application Security Workshop) or equivalent is highly recommended.