Web Application Security Courses and Certifications

Bugcrowd

Turbo Intruder: Abusing HTTP Misfeatures to Accelerate Web Application Attacks

Explore advanced HTTP exploitation techniques using Turbo Intruder, a high-speed Burp extension for automated web application attacks, with insights on payload generation and response analysis.

• YouTube
• 30 minutes
• On-Demand
• Free Video

Bugcrowd

How to Shot Web: Successful Tactics and Tools for Bug Hunting

Explore successful tactics, tools, and methodologies used by top bug hunters to improve your web and mobile app hacking skills for claiming bug bounties.

• YouTube
• 1 hour 18 minutes
• On-Demand
• Free Video

Cyber Mentor

Build, Break, and Hack WebSockets

Explore WebSocket vulnerabilities and exploitation techniques, covering injection attacks and cross-site issues. Learn to build, break, and secure real-time web communications.

• YouTube
• 19 minutes
• On-Demand
• Free Video

Cyber Mentor

Web Application Hacking - File Upload Attacks Explained

Learn to exploit file upload vulnerabilities in web applications, including path traversal attacks and chaining multiple vulnerabilities for maximum impact.

• YouTube
• 17 minutes
• On-Demand
• Free Video

Cyber Mentor

New Web Hacking Tool CAIDO: A Potential Burp Suite Alternative

Explore CAIDO, a potential Burp Suite alternative for web hacking. Learn setup, project creation, targeting, sitemap, scope, replay, automation, and conversion features.

• YouTube
• 12 minutes
• On-Demand
• Free Video

OWASP Foundation

OWASP Zed Attack Proxy: Latest Features and Developments - Lecture

Explore web application security with OWASP's Zed Attack Proxy. Learn key features, including Plug-n-Hack and Zest scripting, suitable for both novice and experienced penetration testers.

• YouTube
• 51 minutes
• On-Demand
• Free Video

OWASP Foundation

HTTP Desync Attacks - Smashing Into The Cell Next Door

Explore HTTP desync attacks and their impact on web security, learning techniques to exploit vulnerabilities and breach neighboring systems.

• YouTube
• 45 minutes
• On-Demand
• Free Video

OWASP Foundation

Juice Shop - OWASP's Most Broken Flagship

Explore OWASP's intentionally vulnerable web application, learn about its features, and discover how it can enhance your web security skills through hands-on hacking challenges.

• YouTube
• 43 minutes
• On-Demand
• Free Video

OWASP Foundation

Hackazon: Stop Hacking Like It's 1999

Explore Hackazon, a modern vulnerable web app for testing security skills. Learn about its AJAX interface, RESTful APIs, and configurable vulnerabilities that challenge both automated scanners and manual pentesters.

• YouTube
• 55 minutes
• On-Demand
• Free Video

John Hammond

Finding Web App Vulnerabilities with AI

Discover how to enhance web application penetration testing using Burp AI, a tool designed to augment your workflow in finding vulnerabilities and hunting for bugs.

• YouTube
• 29 minutes
• On-Demand
• Free Video

DEFCONConference

The Art of Compromising Command and Control Servers - A Web Application Vulnerabilities Perspective

Dive into techniques for exploiting command and control server vulnerabilities, uncovering infrastructure weaknesses, and exposing threat actors through common web application security flaws.

• YouTube
• 35 minutes
• On-Demand
• Free Video

Cyber Mentor

Web App Wednesday - Exciting XXE Injection

Explore XXE injection techniques for web application security, covering PortSwigger labs and practical hacking scenarios.

• YouTube
• 2 hours 1 minute
• On-Demand
• Free Video

Web Pen-Testing Workshop - JSON Injection - Part 12

Explore JSON injection techniques in web penetration testing with expert Jeremy Druin. Learn to identify and exploit vulnerabilities in web applications handling JSON data.

• YouTube
• 31 minutes
• On-Demand
• Free Video

Web Penetration Testing Workshop: XSS and BeEF - Part 10 of 12

Explore XSS vulnerabilities and BeEF framework for web penetration testing, enhancing your cybersecurity skills with hands-on techniques and expert insights.

• YouTube
• 31 minutes
• On-Demand
• Free Video

Web Penetration Testing: Remote and Local File Inclusion - Part 6 of 12

Explore remote and local file inclusion vulnerabilities in web applications, learning detection techniques and exploitation methods for enhanced security awareness.

• YouTube
• 33 minutes
• On-Demand
• Free Video