Web Application Penetration Testing Courses and Certifications

Joseph Delgadillo

Complete Metasploit System Hacking Tutorial

Comprehensive tutorial on Metasploit for ethical hacking, covering various attack techniques, payloads, and exploits. Learn to use Meterpreter, perform privilege escalation, and execute remote attacks on different systems.

• YouTube
• 4 hours 15 minutes
• Self-Paced
• Free Video

Cyber Mentor

Beginner Web Application Hacking

Comprehensive introduction to web application hacking, covering enumeration, XSS, SQL injection, broken access control, and more. Includes live bug bounty hunting demonstration.

• YouTube
• 5 hours 8 minutes
• Self-Paced
• Free Video

Bugcrowd

Hacking with Burp Suite for Bug Bounties - Tutorial 1

Learn essential Burp Suite techniques for bug bounty hunting, including setup and basic functionality, to enhance your web application security testing skills.

• YouTube
• 21 minutes
• Self-Paced
• Free Video

CryptoCat

Damn Vulnerable Web Application (DVWA) - Complete Security Testing Walkthrough

Master web application security through hands-on DVWA challenges covering SQL injection, XSS, CSRF, file uploads, and more vulnerabilities at low, medium, and high difficulty levels.

• YouTube
• 8 hours 9 minutes
• Self-Paced
• Free Video

Hussein Nasser

Popular Web Attacks - XSS, CSRF, SSRF, SQL Injection, MIME Sniffing, Smuggling and More

Comprehensive overview of common web attacks, including XSS, CSRF, SSRF, SQL injection, and more. Practical examples and explanations enhance understanding of web security vulnerabilities.

• YouTube
• 1 hour 19 minutes
• Self-Paced
• Free Video

Hussein Nasser

HTTP Cookies Crash Course

Comprehensive exploration of HTTP cookies, covering creation, properties, types, and security. Includes practical demos and examples for effective implementation and understanding.

• YouTube
• 1 hour 9 minutes
• Self-Paced
• Free Video

John Hammond

Using Snyk to Find & Fix Vulnerabilities

Learn to use Snyk for finding and fixing vulnerabilities in web applications, including hands-on practice with a vulnerable app and a CTF challenge involving prototype pollution and RCE.

• YouTube
• 31 minutes
• Self-Paced
• Free Video

Caleb Curry

Hacking - Intro to Cross Site Scripting

Learn about Cross Site Scripting (XSS), its types, and prevention techniques. Understand the risks of this common web vulnerability and how to secure your applications against potential attacks.

• YouTube
• 32 minutes
• Self-Paced
• Free Video

OWASP Foundation

XML External Entities Attacks - Advanced Exploitation Techniques

Explore advanced techniques for exploiting XML external entities vulnerabilities, including novel approaches for data theft, internal service manipulation, and denial of service attacks.

• YouTube
• 39 minutes
• Self-Paced
• Free Video

OWASP Foundation

Exploiting CORS Misconfigurations for Bitcoins and Bounties - AppSec EU 2017

Explore CORS misconfigurations and their security implications, including real-world attacks on bitcoin exchanges and Google. Learn about subtle vulnerabilities and exploit techniques for web security professionals.

• YouTube
• 37 minutes
• Self-Paced
• Free Video

Web Penetration Testing Workshop: SQL Injection - Part 2 of 12

Learn SQL injection techniques for web penetration testing, covering methods to identify and exploit database vulnerabilities in web applications.

• YouTube
• 47 minutes
• Self-Paced
• Free Video

HackerSploit

OWASP Juice Shop - SQL Injection

Learn to perform SQL injection on OWASP Juice Shop in this hands-on demonstration. Gain practical skills in identifying and exploiting web application vulnerabilities to enhance your cybersecurity knowledge.

• YouTube
• 22 minutes
• Self-Paced
• Free Video

NahamSec

Live Recon on Rockstar Games - Vulnerability Testing Methodology

zseano demonstrates vulnerability testing methodologies on Rockstar Games, showcasing tools like Burp Suite and techniques for identifying XSS and open redirects in this live recon session.

• YouTube
• 1 hour 30 minutes
• Self-Paced
• Free Video

NahamSec

Practical Attacks Using HTTP Request Smuggling

Explore practical HTTP request smuggling attacks, including CL.TE/TE.CL desync techniques, testing methods, and real-world examples. Learn to exploit vulnerabilities for session stealing and response queue poisoning.

• YouTube
• 45 minutes
• Self-Paced
• Conference Talk

NahamSec

Solving XSS Challenges from PortSwigger's Web Academy

Learn to tackle Cross-Site Scripting (XSS) challenges from PortSwigger's Web Academy, enhancing your web security skills and understanding of this critical vulnerability.

• YouTube
• 1 hour 6 minutes
• Self-Paced
• Free Video