From Zero to Exploit: Practical Security Testing of Web, API, Android & Source Code
Sub Category
- Other IT & Software
{inAds}
Objectives
- Understand the basics of Web Client-Server architecture and 3-tier enterprise application models
- Learn what APIs are, their structure, and how REST & SOAP APIs work in real-world systems
- Gain in-depth knowledge of HTTP/HTTPS protocols, headers, cookies, and request-response cycles
- Explore and analyze OWASP Top 10 Web & API vulnerabilities through real-time hands-on exercises
- Set up and test popular vulnerable applications like OWASP Juice Shop, Web Goat, Parabank, and more
- Perform port scanning using Nmap/Zenmap to discover open, filtered, and closed ports
- Install and use Burp Suite for performing manual security testing and penetration testing
- Capture, intercept, and tamper HTTP requests/responses using Burp tools like Proxy, Repeater, Intruder
- Scan REST and SOAP APIs for vulnerabilities using Vooki Security Testing Tool
- Test Android APK files for security flaws using Yazhini, Dex2Jar & JD-GUI
- Scan open-source code repositories for vulnerabilities using Snyk and interpret SAST reports
- Generate detailed security test reports for websites, APIs, and Android applications
Pre Requisites
- Basic understanding of how web applications work (client-server model is helpful)
- Familiarity with software testing or QA concepts (not mandatory but recommended)
- No prior knowledge of security testing required – all tools and concepts are explained from scratch
- A Windows/Linux machine with internet access to install and run security testing tools
- Willingness to learn through hands-on practice using real-world vulnerable applications
FAQ
- Q. How long do I have access to the course materials?
- A. You can view and review the lecture materials indefinitely, like an on-demand channel.
- Q. Can I take my courses with me wherever I go?
- A. Definitely! If you have an internet connection, courses on Udemy are available on any device at any time. If you don't have an internet connection, some instructors also let their students download course lectures. That's up to the instructor though, so make sure you get on their good side!
{inAds}
Coupon Code(s)