OffSec Foundational Web Application Assessments with Kali Linux WEB-200 (OSWA) Training
Offered to the Jacksonville and Northeast Florida community through UNF Professional and Lifelong Learning in partnership with Applied Technology Academy — live online or in person, taught by ATA's practitioner instructors.
Level up your web security skills with OffSec WEB-200 Training. Learn how to identify and exploit web vulnerabilities using Kali Linux.
Course Overview
- Tools for the Web Assessor
- Cross Site Scripting (XSS) Introduction and Discovery
- Cross Site Scripting (XSS) Exploitation and Case Study
- Cross Origin Attacks
- Introduction to SQL
- SQL Injection (SQLi) and Case Study
- Directory Traversal
- XML External Entity (XXE) Processing
- Server Side Template Injection (SSTI)
- More Topics added monthly*
*The OffSec Training Library will be updated continuously with new Topics on an approximately monthly cadence. Not every course or content area will receive an update every month, but some course or content area will receive an update approximately monthly.
Course Outline
- Module 1: Secrets of Success with WEB200
- Module 2: Tools
- Module 3: Cross-Site Scripting Introduction and Discovery
- Module 4: Cross-Site Scripting Exploitation and Case Study
- Module 5: Cross-Origin Attacks Same-
- Origin Policy
- Module 6: SQL Injection
- Module 7: Directory Traversal Attacks
- Module 8: XML External Entities
- Module 9: Server-side Template Injection - Discovery and Exploitation
- Module 10: Command Injection
- Module 11: Server-side Request Forgery
- Module 12: Insecure Direct Object Referencing
- Module 13: Assembling the Pieces: Web Application Assessment Breakdown
Intended Audience
- Students will obtain a wide variety of skill sets and competencies for Web App Assessments
- Students will learn foundational Black Box enumeration and exploitation techniques
- Students will leverage modern web exploitation techniques on modern applications
Job roles like: Web Penetration Testers, Pentesters, Web Application Developers, Application Security Analysts, Application Security Architects, and SOC Analysts and other blue team members
Anyone interested in expanding their understanding of Web Application Attacks, and/or Infra Pentesters looking to broaden their skill sets and Web App expertise
Prerequisites
All students are required to have:
- All prerequisites for WEB-200 can be found within the Offsec
- Fundamentals Program, included with a Learn One or
- Learn Unlimited subscription
Prerequisite Topics include:
- PEN-100: Web Application Basics
- PEN-100: Linux 1 & 2
- PEN-100: Networking Basics