Introduction to Web Application

o  Web Application Attack Statistics
o  Terminology
o  Web Application History
o  Web Application Architecture
o  Web application components
o  Web application Languages
o  Web Server
o  HTTP Protocol
o  Encoding
o  User Agent
o  Session & Cookie
o  HTTP Security Header

HTTP Security Headers

o  Content-Security-Policy (CSP)
o  Strict-Transport-Security Header (HSTS)
o  X-Content-Type-Options
o  X-Frame-Options
o  Referrer-Policy

Introduction to Web Application Security

o  Vulnerability Stack
o  Defense in depth

Web Application Penetration Testing Methodology

o  OWASP (Open Web Application Security Project)
o  OSSTMM (Open Source Security Testing Methodology Manual)
o  PTF (Penetration Testing Framework)
o  ISSAF (Information Systems Security Assessment Framework)
o  PCI DSS (Payment Card Industry Data Security Standard)

o  Types of Web Penetration Testing

o  Internal Penetration Testing
o  External Penetration Testing

o  Web Application Penetration Testing Tools

o  Zed Attack Proxy (ZAP)
o  Wfuzz
o  Wapiti
o  W3af
o  SQLMap

Web Application Penetration Testing Checklist 

                  o  OWASP Web Application Security Testing Checklist
                  o  SANS Securing Web Application Technologies Checklis

          Penetration Testing Certifications
                  o  OSWE (Offensive Security Web Expert)
                  o  GWAPT (GIAC Web Application Penetration Tester)
                  o  CWAPT (Certified Web App Penetration Tester)
                  o  eWPT (elearnSecurity Web Application Penetration Tester)

The Penetration Testing Process

o  Reconnaissance (Active/Passive)
o  Scanning/Enumeration
o  Exploitation
o  Privilege Escalation/Maintaining Access
o  Reporting

Web Application Proxies

o  Example: Burp Proxy

Using a Hacking Tools

o  Example: Kali Linux

Open Web Application Security Project (OWASP)

o  OWASP Web Security Testing Guide
o  OWASP Application Security Verification Standard Project (ASVS)
o  OWASP Cheat Sheet Series
o  OWASP TOP Ten
o  OWASP Web Application Security Testing Checklist

OWASP TOP Ten 2013 vs 2017 vs 2021

o  A1-Injection
o  Explanations
o  SQL Injection Demo
o  Command Injection Demo
o  Defence
o  LAB

A2-Broken Authentication and Session Management

o  Explanations
o  Hijack a Session
o  Brute Force Demo
o  Defence
o  LAB

A3-Cross-site Scripting

o  Explanations
o  Reflected XSS HTML context Demo
o  Stored Demo
o  Defence
o  LAB

A6 Sensitive Data Exposure

o  Explanations
o  Hidden Pages Demo
o  Defenses
o  LAB

A7 Missing Function Level Access Control

o  Explanations
o  Role Demo
o  Defenses
o  LAB

A8 Cross-site Request Forgery

o  Explanation
o  CSRF JS Demo
o  Defenses
o  LAB

A9 Using Components with Known Vulns

o  Explanations
o  Libraries & CVE Demo
o  Defenses
o  LAB

  A10 Unvalidated Redirects and Forwards

         o  Explanations
         o  Redirect to malicious url
         o  Defenses
         o  LAB

รายละเอียดเพิ่มเติม OWASP TOP 10 2017

o  A4:2017-XML External Entities (XXE)
o  Explanations
o  XML External Entities (XXE)
o  Defenses
o  LAB

A8:2017-Insecure Deserialization

o  Explanations
o  Insecure Deserialization
o  Defenses
o  LAB

A10:2017-Insufficient Logging & Monitoring

o  Explanations
o  Logging & Monitoring
o  Defenses
o  LAB

รายละเอียดเพิ่มเติม OWASP TOP 10 2021

o  A04:2021-Insecure Design
o  A08:2021-Software and Data Integrity Failures
o  A10:2021-Server-Side Request Forgery
      o  Explanations
      o Server-Side Request Forgery
      o  Defenses
      o  LAB