Certified Web Application Security Tester (C-WAST)

Course Curriculum

Chapter 1: Web Application Testing Software – Part 1

Lecture 1: Web Application testing software

Lecture 2: Tamper Data

Lecture 3: Live HTTP header

Lecture 4: Firebug

Lecture 5: Hackbar

Lecture 6: HCON STF Framework

Lecture 7: BurpSuite

Lecture 8: Google Hacking

Lecture 9: Google Hacking Practical

Chapter 2: Web Application Security – Part 2

Lecture 1: XSF Theory

Lecture 2: XSF DEMO

Lecture 3: Insecure Direct Object Reference(IDOR)

Lecture 4: Insecure Direct Object Reference Demo

Lecture 5: SQL injection

Lecture 6: SQL Injection DEMO

Lecture 7: File Inclusion

Lecture 8: File Inclusion LFI

Lecture 9: File Inclusion RFI

Lecture 10: DOM XSS Presentation

Lecture 11: DOM XSS DEMO

Chapter 3: Avenger – SQL Protection – Bypass Attacks

Lecture 1: SQL Injection Bypass

Chapter 4: Avenger – Web Application Shell Detection Bypass

Lecture 1: Bypassing File get type method

Lecture 2: Bypassing htaccess protection

Lecture 3: FileSize Protection Mechanism – Bypass

Chapter 5: Avenger – Shell Upload Bypass(Firewall – Modsecurity & Antivirus Bypass

Lecture 1: Modsecurity Bypass

Lecture 2: Web server Antivirus Bypass

Chapter 6: Avenger – Symlink Bypass Attack

Lecture 1: Symlink Bypass Attack

Chapter 7: Xenotix – Cross Scripting Scanner & Exploiter

Lecture 1: Xenotix Theory

Lecture 2: Xenotix Practical

Chapter 8: IronWasp – Web Apps Scanner Theory

Lecture 1: Ironswasp theory

Lecture 2: Ironwasp Demo

Chapter 9: Web Exploitation Software

Lecture 1: D2 Elliot – Vulnerability Scanning and Exploitation Tool – Installation

Lecture 2: D2 Elliot – Vulnerability Scanner – Exploitation

Chapter 10: Anonymous Browsing and Testing using TOR

Lecture 1: Anonymous Browsing and Testing using ToR

Chapter 11: OWASP Top10 Introduction

Lecture 1: OWASP Top10 – Introduction

Chapter 12: Certified Web Application Security Tester Quiz