Certificate in Web Application Security Testing

Course details

Web application security testing involves testing and assessing security of web applications and web sites so as to protect websites and online services against different security threats that exploit vulnerabilities in an application's code. The inherent complexity of source code of web applications increases the likelihood of unattended vulnerabilities and malicious code manipulation.

Why should one take Certificate in Web Application Security Testing?
Web Application Security Testing is the emerging domain in software testing which has gained widespread usage due to extensive usage of web applications especially due to COVID pandemic.

Vskills Certificate in Web Application Security Testing covers web technology, security and software testing so as to design and execute test cases for web applications.

The certification covers:-

• Client Side Web Application Security
• Server Side Web Application Security
• Web Application Security Test Design
• Web Application Security Test Execution

Who will benefit from taking Certificate in Web Application Security Testing?
Security professionals, software testing professional, engineers, team leads, senior QA engineers, managers will benefit immensely by opting for Vskills Certificate in Web Application Security Testing to gain an edge in the Web Application Security testing and be noticeable amongst their colleagues as well as make progress in their respective careers.

Students taking the certification also gain by showcasing their understanding of Web Application Security Testing and are able to increase their job opportunities.
 
Benefits of Certification

• Government certification
• Certification valid for life
• Lifelong e-learning access
• Learning Hours: 10+ hrs

 
How It Works

1. Select Certification & Register
2. Receive Online e-Learning Access (LMS)
3. Take exam online anywhere, anytime
4. Get certified & Increase Employability

Test Details

• Duration: 60 minutes
• No. of questions: 50
• Maximum marks: 50, Passing marks: 25 (50%).
• There is NO negative marking in this module.
• Online exam.

 

TABLE OF CONTENT

Web Technology Basics

• Web Application
• HTML
• CSS
• JavaScript
• Document Object Model (DOM)
• XPath
• Popular Web Browsers
• Inspecting Elements in Browser
• TCP/IP Protocol Architecture
• Internet Protocol
• Transport Layer

Software Testing Basics

• Scope
• Functional vs. Non-Functional testing
• Defects and Failures
• Finding Faults Early
• Compatibility
• Input Combinations and Preconditions
• Static vs. Dynamic Testing
• Software Verification and Validation
• The Software Testing Team
• Software Quality Assurance (SQA)
• Testing Methods - The box approach

Security Concepts

• Security Principles
• Identification and Authentication
• Attack Types
• Social Engineering
• Steganography

Information Gathering

• Information Gathering Basics
• DNS, whois and ARIN records
• Using traceroute, e-mail tracking and web spider
• Google Hacking
• Popular Information Gathering Tools

Vulnerability Analysis

• Vulnerability Analysis Basics
• Identifying and Removing Vulnerabilities
• Vulnerability Naming
• Vulnerability Assessment Tools

Exploitation Techniques

• Attack Vector
• SQL Injection
• Buffer Overflow
• Cross-Site Scripting or XSS
• CSRF
• Hidden Fields
• Web-Based Password Cracking
• Cookies Attack
• URL Obfuscation
• Arbitrary Code Execution
• File Inclusion Vulnerability
• Man-in-Middle Attack

Client Side Web Application Security

• DOM-based Cross site scripting
• JavaScript Execution
• HTML Injection
• Client Side URL Redirect
• CSS Injection
• Client Side Resource Manipulation
• Cross Origin Resource Sharing
• Cross Site Flashing
• Clickjacking
• WebSockets
• Web Messaging
• Local Storage

Server Side Web Application Security

• Configuration and Deployment Management Testing
• Identity Management Testing
• Authentication Testing
• Authorization Testing
• Session Management Testing
• Input Validation Testing
• Error Handling
• Cryptography
• Business Logic Testing

Web Application Security Test Design

• Test Design
• Web Application Security Testing Challenges
• Web Application Security Testing Requirements Gathering
• Web Application Security Testing High Level Design
• Web Application Security Testing Low level Design
• OWASP Web Security Testing Framework

Web Application Security Test Execution

• Unit Testing
• Integration Testing
• Web Application Security Test Development
• Web Application Security Testing Defects
• Defects Reporting
• SAST
• DAST
• Web Application Security Testing Tools

Updated on 14 June, 2024