Intro to Web Security 

Course Details:

This course is designed to provide participants with the needed knowledge and background that enables them to engage in capture the flag hacking contests, especially in Web Security challenges. Through the coming weeks, we'll cover the Web Security category challenges used in the CTF Competition. We will introduce every topic and give practical live examples on how to solve the challenges in such a category. The training will include theory and practical hands-on experience in our lab setup.

Course Duration: 

6 Live Online Sessions (4 Hrs/Session) on 16, 17, 18, 23, 24, 25 November at 06:00 PM Amman Time.

Training Modules: 

1. Introduction to Web Security

2. Demonstration of Web Application Life Cycle

3. Understanding the Basics of Web App Vulnerabilities such as:

SQLi, XSS, RCE, CSRF, XXE, HTML Injection, LFI/RFI, Path Traversal, SSRF

4. CMS Web Attacks

5. Mastering Burpsuite

6. Sessions Management Issues 

7. Web Service Attacks

8. Describing Authentication and Authorisation attacks 

Prerequisite:

• Network (Basic knowledge)

• Programming (Basic Knowledge) 

• Operating Systems (Basic Knowledge) 

Instructor

Muhammed Anwar 

Security Analyst and CTF Challenges Developer, CyberTalents