SECTION 1: Introduction and Information Gathering

This section covers essential techniques for web application penetration testing, including interception proxies, HTTP basics, information gathering, virtual host discovery, target profiling, HTTPS testing, and content spidering. Labs include configuring Burp Suite and performing thorough assessments.
Topics:

• Web Application Penetration Testing Methodologies

• Interception Proxies

• HTTP Basics: Protocols, Requests and Responses

• Virtual Host Discovery, Spidering, and Target Profiling

• Security Testing Fundamentals

SECTION 2: Fuzzing, Scanning, APIs, and Authentication

This section focuses on advanced web application security techniques, including fuzzing for vulnerability detection, information leakage analysis, and using scanners such as Nuclei and Burp Suite Pro. It also covers forced browsing for content discovery, API exploitation, various authentication methods, and federated identity protocols.
Topics:

• Master Techniques like Fuzzing and Information Leakage Detection

• Utilize Advanced Scanning Tools like Burp Suite Pro and Nuclei

• Forced Browsing to Find Unlinked Content

• Identify and Exploit API Vulnerabilities Using Tools like Bruno

• Federated Identity and Access Protocols

SECTION 3: Identity, AuthN/AuthZ Bypass, and Client-Side Attack

This section moves from username harvesting and blind password spraying through session management, authentication and authorization bypass, then into stored, reflected, and DOM-based XSS, payload construction, data exfiltration, and browser exploitation using tools such as Burp Suite, ffuf, DOM Invader, and BeEF.
Topics:

• Username Harvesting

• Session Management and Token Randomness Analysis

• Authentication and Authorization Bypass

• Cross-Site Scripting Overview and Impacts

• Client-side Testing, DOM, AJAX, Browser Developer Tools

SECTION 4: Prototype Pollution, Database and Command Injection, SSRF, and XXE

Students progress from prototype pollution and database injection (SQL and NoSQL) through command injection, SSRF, and XML external entities. They learn to move from input-level flaws to full data access and system impact using tools like Burp Suite and sqlmap.
Topics:

• Prototype Pollution and Abuse of JavaScript’s Inheritance Model

• SQL and NoSQL Injection Techniques, Categories, and Impact

• Database Injection Tooling and Automation with Burp Suite

• Command Injection and Collaborator-Based Probing

• SSRF and XXE Attacks

SECTION 5: CSRF, Serialization, SSTI, and Advanced Tools

This section advances from insecure deserialization, file inclusion, Python automation, SSTI, CSRF, and file upload exploitation to Metasploit-driven post-exploitation and the business side of penetration testing. It connects technical attacks to logging, logic flaws, LLM risk, and reporting.
Topics:

• File Inclusion and Insecure Deserialization

• Python Scripting and Pickling for Automating Web App Testing

• Server-Side Template Injection (SSTI)

• Security Logging and Monitoring Failures

• Metasploit Framework Usage

SECTION 6: Capture the Flag

During this section, students compete in teams on the ranges.io platform, a web application penetration testing tournament. This Capture-the-Flag exercise allows them to apply and sharpen skills, complete missions, exfiltrate data, and tackle progressive challenges with hints suitable for all skill levels.
Topics:

• Team-based CTF exercises

• Realistic web application challenges

• Progressive missions and data exfiltration tasks

• Reinforcement of practical skills learned in the course