Learning path
Web Application Pentesting
Learn about the various vulnerabilities that can exist in web application and how to perform security assessments of web applications.
intermediate
Learn how to perform security assessments of web applications:
- Learn about common web vulnerabilities
- Understand web authentication mechanisms
- Perform server- and client-side exploits
- Understand the remedies for web vulnerabilities

Complete this learning path and earn a certificate of completion.
Introduction
Every day you interact with web applications. Just reading the information here means you are using a web application! Understanding how to test web applications is a critical skill required by almost every pentester! Even if you want to specialise in testing other systems like networks or cloud, a solid baseline in web application testing will greatly assist you on this journey. This path covers key topics that you need to understand for web application testing, such as:
- Authentication Attacks
- Injection Attacks
- Advanced Server-Side Attacks
- Advanced Client-Side Attacks
- HTTP Request Smuggling
Completing this learning path will allow you to learn and become a great web application penetration tester.
Section 1
Authentication
Section 2
Injection Attacks

Section 3
Advanced Server-Side Attacks



Section 5
HTTP Request Smuggling

