CPD course All Levels

Web Application Penetration Testing

5 enrolled 19h 37m of learning Updated Nov 2026
CertificateOn completion
19h 37mSelf-paced
55 lessonsOn the UISC learning portal
All LevelsNo prior training needed

Course curriculum

1 modules 55 lessons 19h 37m total
01 Web Application Penetration Testing 55 lessons
  1. About The Course
  2. Web Attack Simulation Lab
  3. Web application technologies 101 – PDF
  4. HTTP Protocol Basics
  5. Encoding Schemes
  6. Same Origin Policy – SOP
  7. HTTP Cookies
  8. Cross-origin resource sharing
  9. Web application proxy – Burp suite
  10. Fingerprinting web server
  11. DNS Analysis – Enumerating subdomains
  12. Metasploit for web application attacks
  13. Web technologies analysis in real time
  14. Outdated web application to server takeover
  15. BruteForcing Web applications
  16. Shodan HQ
  17. Harvesting the data
  18. Finding link of target with Maltego CE
  19. Cross Site Scripting- XSS – PDF
  20. Cross site scripting
  21. Reflected XSS
  22. Persistent XSS
  23. DOM-based XSS
  24. Website defacement through XSS
  25. XML Documents & database
  26. Generating XSS attack payloads
  27. XSS in PHP, ASP & JS Code review
  28. Cookie stealing through XSS
  29. Advanced XSS phishing attacks
  30. Advanced XSS with BeEF attacks
  31. Advanced XSS attacks with Burp suite
  32. Code Review Guide
  33. SQL Injection attacks – PDF
  34. Introduction to SQL Injection
  35. Dangers of SQL Injection
  36. Hunting for SQL Injection vulnerabilities
  37. In-band SQL Injection attacks
  38. Blind SQL Injection attack in-action
  39. Exploiting SQL injection – SQLMap
  40. Fuzzing for SQL Injection – Burp Intruder
  41. CSRF or XSRF attack methods
  42. Anti-CSRF Token methods
  43. Anti-CSRF token stealing-NOT easy
  44. Authentication bypass-hydra
  45. HTTP Verb Tampering
  46. HTTP parameter pollution – HPP
  47. Authentication
  48. Client side control bypass
  49. LFI & RFI attacks
  50. Unrestricted file upload – content type
  51. Unrestricted File Upload – Extension Type
  52. Remote code execution using Shell Uploads
  53. XXE attacks in action
  54. Advance intruder attack types
  55. Finding details with open source

About this course

Overview:

Welcome to "Web Application Penetration Testing"! This course is designed to equip you with the skills and knowledge needed to conduct comprehensive penetration tests on web applications. With the increasing prevalence of cyber threats targeting web applications, understanding how to identify and mitigate vulnerabilities is essential for cybersecurity professionals. In this course, you'll learn the techniques and methodologies used in web application penetration testing to ensure the security of web applications.

  • Interactive video lectures by industry experts
  • Instant e-certificate
  • Fully online, interactive course with Professional voice-over
  • Developed by qualified first aid professionals
  • Self paced learning and laptop, tablet, smartphone friendly
  • 24/7 Learning Assistance
  • Discounts on bulk purchases

Main Course Features:

  • Detailed explanation of web application security concepts and common vulnerabilities
  • Hands-on labs and practical exercises for conducting penetration tests on web applications
  • Coverage of popular tools and frameworks used in web application penetration testing (e.g., Burp Suite, OWASP ZAP)
  • Exploration of manual and automated techniques for vulnerability discovery and exploitation
  • Guidance on writing comprehensive penetration test reports and recommendations
  • Real-world case studies and examples demonstrating the application of penetration testing techniques
  • Access to resources and tools for continued learning and practice in web application security
  • Supportive online community for collaboration and assistance throughout the course

Who Should Take This Course:

  • Cybersecurity professionals interested in specializing in web application security
  • Penetration testers and ethical hackers looking to expand their skill set to include web application testing
  • Web developers and software engineers seeking to enhance their understanding of web application security
  • IT professionals responsible for ensuring the security of web applications in their organizations

Learning Outcomes:

  • Understand the fundamentals of web application security and common vulnerabilities
  • Learn how to conduct penetration tests on web applications using manual and automated techniques
  • Identify and exploit security vulnerabilities in web applications
  • Write comprehensive penetration test reports with detailed findings and recommendations
  • Gain hands-on experience through practical exercises and labs in web application penetration testing
  • Enhance your skills in using penetration testing tools and frameworks such as Burp Suite and OWASP ZAP
  • Develop strategies for securing web applications and mitigating identified vulnerabilities
  • Stay updated with the latest trends and best practices in web application security and penetration testing.

Certification

Once you’ve successfully completed your course, you will immediately be sent a digital certificate. All of our courses are fully accredited, providing you with up-to-date skills and knowledge and helping you to become more competent and effective in your chosen field. Our certifications have no expiry dates, although we do recommend that you renew them every 12 months.

Assessment

At the end of the Course, there will be an online assessment, which you will need to pass to complete the course. Answers are marked instantly and automatically, allowing you to know straight away whether you have passed. If you haven’t, there’s no limit on the number of times you can take the final exam. All this is included in the one-time fee you paid for the course itself.

Your certificate

CPD certificate — download it when you finish

Issued the moment you complete the final module. Every certificate lists the course aims and objectives, anticipated learning outcomes, the quality-assurance process — the elements required for verifiable CPD. Non-registrants can use it as CQC training evidence and for appraisals.

Aims & objectives Learning outcomes Unique certificate number

Common questions

Where do I take the course?

On the UISC learning portal. "Enrol now" takes you to this course there, where you pay securely, get your login and study at your own pace. Your certificate is issued there when you finish.

When can I start?

Immediately. Access opens the moment your order is confirmed and you can learn from any device, in any order, as many times as you like.

How is the course assessed?

A short multiple-choice or scenario-based assessment at the end of the course with instant results. You can retake it as many times as you need at no extra cost.

Can I enrol my whole team?

Yes. Organisations can buy multiple places on one invoice and receive a training record for every learner. Contact us for team pricing.

£39.00 19h 37m · All Levels
Enrol now