Web Hacking Fundamentals

Understand the core security issues with web applications, and learn how to exploit them using industry tools and techniques.
In this module, we'll be exploring the basic components of the modern web including both the basic protocols used, as well as various server components that make up the world wide web. You'll be diving into how to use BurpSuite, a tool which is widely regarded to be at the heart of web hacking. Additionally, you'll learn how to perform basic enumeration of websites and exploit the ten most common web application vulnerabilities by hacking various real-world applications.

0%
How Websites Work
To exploit a website, you first need to know how they are created.
0%
HTTP in Detail
Learn about how you request content from a web server using the HTTP protocol
0%
Burp Suite: The Basics
An introduction to using Burp Suite for web application pentesting.
0%
OWASP Top 10 - 2021
Learn about and exploit each of the OWASP Top 10 vulnerabilities; the 10 most critical web security risks.
0%
OWASP API Security Top 10 - 1
Learn the basic concepts for secure API development (Part 1).
0%
OWASP Juice Shop
This room uses the Juice Shop vulnerable web application to learn how to identify and exploit common web application vulnerabilities.
0%
Upload Vulnerabilities
Tutorial room exploring some basic file-upload vulnerabilities in websites
0%
Pickle Rick
A Rick and Morty CTF. Help turn Rick back into a human!
What are modules?
A learning pathway is made up of modules, and a module is made of bite-sized rooms (think of a room like a mini security lab).
