In this course, we will be concentrating mainly on how Penetration Testing can be done on web based applications. And it can also be used for mobile based applications because most of the mobile based applications communicate with a cloud based API. The security of this API is actually the security of the mobile application which is using this API.

The Program 

1. Install WAMP.
2. Install Mutillidae.
3. Install Burp Suite.
4. SQL Injection — Attack and Defenses.
5. OS Command Injection — Attack and Defenses.
6. JSON Injection Attack using Reflected XSS Technique and Defense Measures.
7. Cookie Manipulation Attack and Defenses.
8. Username Enumeration Attack.
9. Brute Force Attack Technique and Defenses.
10. Cross Site Scripting (Reflected XXS using HTML Context).
11. Cross Site Scripting (Reflected XSS using JavaScript).
12. Storage Cross Site Scripting Attack — XSS Defenses.
13. Insecure Direct Object Reference — IDOR and Defense using File Tokens.
14. Insecure Direct Object Reference — IDOR and Defense using URL Tokens.
15. Directory Browsing Traversal Threat Demonstration ect.