Analyse Web Application Reconnaissance and Vulnerability Assessment
About This Course
In this module, participants will delve into the techniques and methodologies for enumerating and exploiting vulnerabilities in web applications. The module covers web application reconnaissance, threat modeling, input validation, and various attack vectors such as cross-site scripting (XSS) and injection attacks. Through practical exercises, learners will gain hands-on experience in identifying and exploiting common web application vulnerabilities, ensuring they can effectively assess and secure web environments.
What You'll Learn
LO2: Extract useful information from web page source code, such as hidden form fields, database connection strings, credentials, and developer comments.
LO3: Understand the importance of input validation and differentiate between whitelisting, blacklisting, and data sanitization techniques.
LO4: Identify how error messages may disclose useful information to an attacker.
LO5: Understand the implications of XSS vulnerabilities and use these techniques to obtain sensitive information from other users.
LO6: Identify and exploit injection vulnerabilities, including SQL injection, LDAP injection, code injection, and XML injection.
LO7: Use common techniques to identify and review security deficiencies in source code.
LO8: Determine and exploit SQL injection conditions to enumerate databases, execute commands, and manipulate parameters using client-side proxies
Entry Requirements
Language: Obtained at least Grade C6 in GCE 'O' Level English Language, or
Be able to listen, speak, read and write English at a proficiency level equivalent to WSQ Workplace Literacy (WPLN) Level 5. Academic: Obtained at least Grade C6 in 3 GCE ‘O’ Level Subject, or Higher NITEC or equivalent.