Web Application Penetration Testing Courses and Certifications

Learn about important secure coding methodologies including CRLF Injection, Directory Traversal, Information Leakage, Open Redirects, OS Command Injection, SQL Injection and Cross-site Scripting

• Cybrary
• 1-2 hours
• Self-Paced
• Paid Course

Basics of SQL Injection - Penetration Testing for Ethical Hackers

SQL injection is a common hacking technique used to retrieve or destroy data from a database without permission. It is considered one of the top web application security risks.

• freeCodeCamp
• 1-2 hours
• Self-Paced
• Free Video

Learn to identify common web attacks like SQLi, LFI, and XSS by analyzing web server logs. Gain skills in extracting key information, using scripts for faster analysis, and understanding network-based attacks like DDoS.

• Cybrary
• 2-3 hours
• Self-Paced
• Paid Course

Learn to use Burp Suite Pro for web application security testing. Explore key features like intercepting proxy, spider, scanner, and intruder to identify vulnerabilities and perform automated attacks.

• Cybrary
• Self-Paced
• Paid Course

Learn OWASP top 10 vulnerabilities, detection, and remediation for secure web application deployment. Gain essential skills to protect against hackers and meet industry standards.

• Cybrary
• 1-2 hours
• Self-Paced
• Paid Course

This course will cover an introduction to Cross-Site Scripting (XSS)- a popular cybersecurity attack. This XSS training will explain several forms of cross-site scripting attacks.

• Cybrary
• Self-Paced
• Paid Course

Learn to identify, exploit, and prevent SQL injection vulnerabilities in web applications through hands-on labs using tools like Metasploitable, Kali Linux, and SQLMap.

• Cybrary
• 1-2 hours
• Self-Paced
• Paid Course

Learn to identify and mitigate security misconfigurations, including exploiting Jenkins servers and XML External Entities vulnerabilities. Gain practical skills through hands-on labs and real-world scenarios.

• Cybrary
• 3-4 hours
• Self-Paced
• Paid Course

Salesforce

Develop Secure Web Apps

Detect and prevent common vulnerabilities in your code and strengthen your web apps.

• Trailhead
• 2-3 hours
• Self-Paced
• Free Online Course

OWASP Top 10 Vulnerabilities Course (How To)

111-minute Security course: Welcome again to the realm of web security, where millions of dollars and people’s lives are on the line. Not every web...

• Treehouse
• 1 hour 51 minutes
• Self-Paced
• Free Trial Available

A variety of free challenges recreated based on real bug bounty findings.

• Independent
• Self-Paced
• Free Online Course

Web Security & Bug Bounty: Learn Penetration Testing

Become a Bug Bounty Hunter. Hack websites, fix vulnerabilities, improve web security and much more. You'll learn penetration testing from scratch and master the most modern pentesting tools & best practices for 2024!

• Zero To Mastery
• 11 hours
• Self-Paced
• Paid Course

Bugcrowd

Introduction to Burp Suite

1 rating

Comprehensive guide to Burp Suite setup, methodology, and advanced features for effective white hat hacking and bug bounty hunting. Learn proxies, scanners, fuzzing, and targeting techniques.

• YouTube
• 1 hour 38 minutes
• Self-Paced
• Free Video

Bugcrowd

Cross Site Scripting - XSS

1 rating

Learn the fundamentals of Cross Site Scripting (XSS), including its history, types, and real-world examples. Explore best practices, advanced techniques, and tools for identifying and exploiting XSS vulnerabilities.

• YouTube
• 25 minutes
• Self-Paced
• Free Video

David Bombal

Burp Suite

Comprehensive introduction to Burp Suite for web application security testing, covering key features like proxy, repeater, and intruder. Includes hands-on demos for SQL injection and fuzzing.

• YouTube
• 1 hour 6 minutes
• Self-Paced
• Free Video