Web Application Penetration Testing Courses and Certifications

Web Application Ethical Hacking - Penetration Testing Course for Beginners

33 ratings

Learn web app penetration testing. You will learn pentesting techniques, tools, common attacks and more. The tools covered in the course include Burp Suite, Nikto, Dirbuster, curl, sublist3r, nmap, and many others.

• freeCodeCamp
• 5 hours
• Self-Paced
• Free Video

Server-Side Request Forgery (SSRF) Prevention in Express

Master SSRF vulnerability detection and prevention in Express applications through secure coding practices, monitoring, and incident response techniques.

• CodeSignal
• 2 hours
• Self-Paced
• Free Certificate

Server-Side Request Forgery (SSRF)

Explore Server-Side Request Forgery vulnerabilities, exploit SSRF in URL imports, webhooks, and previews, then implement robust defenses including DNS validation, blocklists, and middleware protection.

• CodeSignal
• 3 hours
• Self-Paced
• Free Certificate

Mastering Command Injection - The Ultimate Hands-On Course

209 ratings at Udemy

How to Find, Exploit and Defend Against Command Injection Vulnerabilities. For Ethical Hackers, Developers & Pentesters

• Udemy
• 2 hours 9 minutes
• Self-Paced
• Paid Course

Explore techniques to identify and prevent Cross-Site Request Forgery (CSRF) attacks, enhancing web application security and protecting user systems from malicious actors.

• Codecademy
• 1 hour
• Self-Paced
• Free Trial Available

Complete Web Application Hacking & Penetration Testing

1418 ratings at Udemy

Hacking web applications, hacking websites, bug bounty & penetration testing in my ethical hacking course to be Hacker

• Udemy
• 9 hours 13 minutes
• Self-Paced
• Paid Course

OWASP Top 10: Server Side Request Forgery

68 ratings at Codecademy

Learn to identify and prevent server-side request forgery, a critical web application security risk. Explore its significance in the 2021 OWASP Top 10 and enhance your cybersecurity skills.

• Codecademy
• 1 hour
• Self-Paced
• Free Trial Available

Hone your incident handling skills by joining Ken Underhill in this Attacks and Persistence for Incident Handlers course. Identify DNS and USB attacks and walk through a session hijacking lab to understand how an attacker can exploit a session to harvest…

• Cybrary
• Self-Paced
• Paid Course

Learn to identify, exploit, and protect against Server-Side Request Forgery (SSRF) vulnerabilities. Explore Facebook's SSRF dashboard and practice with Apache Solr in hands-on labs.

• Cybrary
• 2-3 hours
• Self-Paced
• Paid Course

Hands-on exploration of session hijacking techniques for ethical hackers. Learn to perform attacks, set up virtual environments, and understand vulnerabilities to enhance penetration testing skills.

• Cybrary
• 1-2 hours
• Self-Paced
• Paid Course

Learn to identify, exploit, and protect against XML External Entities (XXE) vulnerabilities. Gain hands-on experience through demos and labs, focusing on real-world scenarios like the Facebook XXE vulnerability.

• Cybrary
• 2-3 hours
• Self-Paced
• Paid Course

HackerSploit

Web App Penetration Testing - CSRF (Cross Site Request Forgery)

Demonstración práctica de ataques CSRF en OWASP Juice Shop utilizando BurpSuite. Aprende a identificar y explotar vulnerabilidades de falsificación de peticiones entre sitios en aplicaciones web.

• YouTube
• 23 minutes
• Self-Paced
• Free Video

NahamSec

Learning Server Side Request Forgery Basics Using Portswigger's Web Security Academy

Explore Server Side Request Forgery (SSRF) basics through hands-on practice with Portswigger's Web Security Academy, enhancing your web security skills and understanding of this critical vulnerability.

• YouTube
• 42 minutes
• Self-Paced
• Free Video

NahamSec

How to Identify and Exploit CVE-2021-43798 - Grafana Unauthenticated Directory Traversal

Learn to identify and exploit the Grafana CVE-2021-43798 vulnerability, including detection methods, working proof-of-concept, and practical exploitation techniques for unauthenticated directory traversal.

• YouTube
• 19 minutes
• Self-Paced
• Free Video

Bugcrowd

Server Side Request Forgery

Learn to identify, exploit, and mitigate Server-Side Request Forgery vulnerabilities. Covers external and internal SSRF, bypassing blacklists, and includes practical demonstrations and real-world examples.

• YouTube
• 37 minutes
• Self-Paced
• Free Video