Web Security BOOTCAMP

Overview

This is a 2 day advanced web security training for system engineers, developers and security enthusiasts who want to learn to assess web applications and web servers.

The focus here is on both attacking and defending techniques. All the exercises are performed on our famous bWAPP web security testing framework.

Students will detect and exploit web vulnerabilities like SQL and HTML injections, authentication and session issues, XSS, CSRF, file inclusions, Heartbleed, Shellshock, Drupageddon, POODLE, ClickJacking, etc. Detection and exploitation are done using manual procedures as well as using open source tools and commercial web scanners!

Objectives

After completing our training course, students should possess the ability to assess web applications and web servers for security vulnerabilities. Additionally, they should be able to harden web servers, identify insecure code, and write a false-positive-free audit report.

We focus on methodologies and procedures, and not solely on software tools. This approach, combined with our realistic hands-on labs, sets MME's courses apart from others!

On Demand

This training is on demand, and can be organized on-site at your preferred location, or online through our MME CyberClass, this starting from 5 students.
 

Related

• Web Security Framework
• Web Security Scanner
• Web Security Testing