DURATION 14 Hours (2 days * 7 hrs)
COURSE CONTENT
Day 1
Module 1: Introduction to Information Security and Application Security Testing
Module 2: Penetration Testing Process
Module 3: OWASP TOP 10
Module 4: Introduction to VA/PT tools (e.g: Burpsuite, Sqlmap, Winhex, Wireshark, OWASP ZAP, etc.)
Module 5: Information Gathering
Module 6: HTTP and HTTPS basics
Module 7: Session Management in Applications
Module 8: Session Hijacking attacks and other session related insecurities and its mitigation
Module 9: Session Fixation Attack and its mitigation
Module 10: Cross Site Scripting (XSS) attack and its mitigation
Module 11: CSRF (Cross-Site Request Forgery) attack and its mitigation
Day 2
Module 12: SQL Injection attack and its mitigation
Module 13: Insecurities in Authentication and secure practices
Module 14: Stealing Passwords and other critical data
Module 15: Invalid Redirects and Forwards attacks and its mitigation
Module 16: Parameter manipulation (Authorization) attacks and its mitigation
Module 17: Clickjacking attack and its mitigation
Module 18: LFI and RFI
Module 19: Penetration test report structure and components
Module 20: Course Summary and Revision
TARGET AUDIENCE
Application developers, QA engineers, security analysts and consultants, anyone who wants to develop skills on application security/penetration testing
TAKE-AWAYS • One Copy of Training Presentation • Application Security Tools • Sample Vulnerable Applications for practice
PRE-REQUISITES
The attendees should have laptops with minimum 2GB RAM.
Administrator level privileges on each laptops are required for the hands-on activity.
List of tool required and the installation steps would be shared with the attendees prior to the training. Attendees are required to have them installed.
Fees-Rs.5000/- all inclusive.
Batch dates - 26th August and 2nd September 2017.
Certified
You have 
