Cyber Security Training - Network Security Training

Introduction

Our advanced practical three-day web hacking training course helps the delegates gain in-depth knowledge on how to identify security vulnerabilities and subsequently identify the real risk of these vulnerabilities by exploiting them.

Prerequisites

• This is an advanced course on application security and all delegates must have completed the CSTP course, or possess equivalent knowledge and have a practical understanding of backend web application technologies.

Who Should Attend?

• This course is ideally suited to individuals that have been working in an application testing (security assessment/administration) or developer environment for several months.

Course Outline

• Introduction to web applications
• Authentication
• Authorisation
• SSL Misconfigurations
• Security problems with thick client applications
• Web/application server issues
• Cross-site scripting
• Advanced XSS
• Cross-site request forgery
• Session fixation
• CRLF injection
• Clickjacking
• SQL injection
• Malicious file uploads
• Vulnerable flash applications
• Business logic bypass
• OS code execution
• Remote/local file inclusion
• Direct object reference
• Capture the flag session