All courses

Cybersécurité

Conduct a Web Penetration Test

Put yourself in the shoes of an attacker and perform a full penetration test on a web application, using the methods and tools of a professional pentester!
Medium
10 hours
Interested in this free-access course?

How does an attacker break into a web application without being noticed? And what security challenges do web developers and integrators face in their day-to-day work?

If you’ve ever asked yourself these questions, then this course is for you!

Penetration testing is a popular assessment method among companies because they regularly need to ensure that their websites or web applications can withstand attacks.

Cybersecurity professionals carry out a penetration test on behalf of a client or project sponsor, stepping into the shoes of an attacker to determine whether a system is vulnerable. They will typically find vulnerabilities during their work and report them to the client. The client then has the information they need to secure their system and protect it from external attacks!

In this course, you’ll learn how to perform a penetration test on a web application, from start to finish!

Starting with a client’s request to help test the vulnerability of their web application, you’ll work step by step with a professional penetration tester to prepare an effective work plan to be discussed and agreed with the client. You’ll also familiarize yourself with the environment where the web application is running and then analyze its content and behavior. From this preliminary work, you’ll be able to identify the web application’s vulnerabilities, which you can then summarize clearly and accurately in a document presenting the results.

Ready to dive into the world of web penetration testing? Then let’s get started!

Learning outcomes

  • Prepare for a web penetration test
  • Familiarize yourself with the web application’s ecosystem
  • Analyze the content of a web application in detail
  • Identify web application vulnerabilities
  • Report the results of your web penetration test

Requirements

Prerequisites:

  1. Have good technical knowledge of networks and systems, and understand how a web application works.
  2. Understand the concepts of client-server, network services, and TCP/IP protocols.
  3. Be familiar with how a command terminal and virtual machine work, and know how to virtualize an environment, particularly to install the tool we’ll be using in the course, Kali.

To update your skills, why not take the following courses:

Tools:

  • Kali
  • Root Me

Contributors

Instructors

TB

Thibaut Bonnetain

Consultant et auditeur indépendant en cybersécurité

Etienne Capgras

Learning Product Manager, en charge de notre catalogue Cybersécurité et IT, pour vous servir :)

Created by

Last updated: 1/23/2025
License

Cybersécurité

Conduct a Web Penetration Test

Medium
10 hours
Free-access course