Web Application Penetration Testing Training 1

1
SECURIUM FOX offers cyber security consultancy
services with its expert and experienced team. We
are providing consulting services to prevent
cyber attacks, data leak and to ensure that our
customers are ready and safe against cyber
attacks, with more than 15 years of
experience.In addition to pentests and
consulting services, SECURIUM FOX prepares its
customers and field enthusiasts for real life
scenarios by providing trainings in the lab
environment which was prepared by themselves,
with its young, dynamic and constantly following
team.Everytime that hackers are in our lives,
there are always risks that we can face with a
cyber attack. Over the years cyber security has
become a critical precaution for all
organizations and companies after the effects and
number of attacks. SECURIUM FOX tests the weak
points of customers for possible attacks and
provides consulting services to eliminate these
weak points.SECURIUM FOX team also offers
support for the development of our country in
this field by supporting free events being
organized as a volunteer by the Octosec team.
ABOUT US
2

• WEB APPLICATION SECURITY AND PENETRATION TESTING
  TRAINING

3
WEB APPLICATION PENETRATION TESTING
Find more flaws with manual web application
penetration testing.

• When searching for vulnerabilities in websites
  and web apps, manual web application penetration
  testing is essential. Automated penetration
  testing tools simply cant find every flaw
  sometimes, it takes the skill and insight of the
  manual tester to identify complex authorization
  issues or business logic flaws..

4

• Manual web application penetration testing is
  most effective and cost-efficient when combined
  with other scanning technologies. Manual testing
  on its own can be quite expensive and
  time-consuming, taking weeks to perform a full
  penetration test. Thats why, when choosing
  technologies that can deliver state-of-the-art
  application security, more leading companies
  today turn to web app penetration testing
  solutions from Veracode. With a full complement
  of testing solutions built on a leading
  application security platform, Veracode helps
  organizations to better protect the software that
  drives business results.

5
Web application penetration testing

• web application penetration testing combines a
  proven process and highly skilled testers to
  achieve consistency, reduce costs and ensure
  customer satisfaction. Before initiating manual
  web application penetration testing, Veracode
  scans applications with automated technologies to
  ensure consistent results and then uses manual
  testing to find flaws that automated tests cant
  discover. In nearly three-quarters of
  applications tested, Veracode web application
  penetration testing typically finds open source
  vulnerabilities that violate the OWASP Top 10.

6

• Globally with the rising number of incidents of
  web defacement, the scope of Web Application
  penetration Tester is definitely rising. Today
  Web Application Penetration Testers are in very
  high demand in software companies, IT security
  firms, Government and Private Sectors etc.
• Scope of web application penetration testing in
  india
• Web Pen tester, Web security analyst/consultant,
  Web Application security analyst.

7
Course Details

• Web Application introduction
• Core Defence Mechanism
• Web Application Technologies and Protocols
• Mapping the Application
• Enumerating Content
• Analyzing the Application
• Bypassing Client-Side Controls
• Mapping the Attack Surface
• Hidden form fields threats
• Attacking Authentication
• Attacking Session Management
• Web2.0 securities

8

• Hacking Webservices
• Threat Modeling- Application security Control
• Injecting code
• SQL Injection
• Cross Site Scripting (XSS)
• CSRF With Hijacks
• Hijacking the Browser
• Controlling Zombies
• Attacking Webserver
• Web Server Exploits
• Hardening Webserver
• Source code vulnerabilities JAVA, ASP.net,
  Perl, Javascript
• Web Application hackers Toolkit

9

• You can always contact with SECURIUM FOX. You can
  contact us through our email addresses or by
  using the contact form on the side.

• INFO
• 3rd Floor,Lohia Towers,
• Nirmala Convent Rd,
• Gurunanak Nagar,Patamata,Vijyawada,
• Andhra Pradesh -520010
• 9652038194
• 08666678997
• info_at_securiumfoxtechnologies.com

10
info_at_securiumfoxtechnologies.com Andhra Pradesh
Office 91 8666678997,91 91652038194 3rd
Floor,Lohia Towers, Nirmala Convent Rd,Gurunanak
Nagar,Patamata,Vijayawada, info_at_securiumfoxtechnol
ogies.com UK Office 44 2030263164 Velevate,
Kemp House, 152 - 160,City Road,EC1V
2NX London info_at_securiumfoxtechnologies.com Tamil
Nadu Office 91 9566884661 Kailash Nagar, Nagar,
Tiruchirappalli, Tamil Nadu 620019 info_at_securiumfo
xtechnologies.com
Noida Office 91 (120) 4291672, 91
9319918771 A-25, Block A, Second Floor,Sector -
3, Noida, India info_at_securiumfoxtechnologies.com
USA Office 1 [phone] 33 West,17th
Street, New York, NY-10011, USA info_at_securiumfoxte
chnologies.com Dubai Office 971 545391952 Al
Ansari Exchange, Ansar Gallery - Karama Branch,
Hamsah-A Building - 3 A St - Dubai - United Arab
Emirates