COURSE OUTLINE 

1. Web Application and Penetration Testing

   a. The industry
   b. Introduction
   c. Getting Started / Bug Bounty
   d. Web Vulnerabilities
   1. Cross-Site Scripting – With LAB
   2. Open Redirects – With LAB
   3. Clickjacking – With LAB
   4. Cross-Site Request Forgery – With LAB
   5. Insecure Direct Object Reference – With LAB
   6. SQl-Injections – With LAB
   7. Race Conditions – With LAB
   8. Server-Side Request Forgery – With LAB
   9. Insecure Deserialization – With LAB
   10. XML External Entity – With LAB
   11. Template Injection – With LAB
   12. Application Logic Errors and Broken Access Control – With LAB
   13. Remote Code Executions – With LAB
   14. Same-Origin Policy Vulnerabilities – With LAB
   15. Single-Sign-on Security Issues – With LAB
   16. Information Disclosure – With LAB
   17. API Hacking – With LAB
   18. Code Review – With LAB

   19. Automatic Vulnerability Discovery Using Fuzzer – With LAB
   20. Subdomain Takeover – With LAB
   e. Conclusions