Course Outline
Introduction
Overview of the Web Security Testing Guide
- The OWASP Testing Project
- Tailoring and prioritizing frameworks for specific organizations
- Core testing principles and techniques
- Defining security testing objectives and requirements
Exploring Various Testing Techniques
- Manual inspections and code reviews
- Threat modeling strategies
- Source code analysis
- Penetration testing approaches
- Integrating security tests and analyzing data
Understanding the OWASP Testing Framework
- Activities spanning development through deployment
- Operational maintenance and ongoing operations
- End-to-end lifecycle testing frameworks and workflows
- Methodologies for penetration testing
Performing Web Application Security Testing
- Information gathering strategies
- Testing configuration and deployment management
- Identity management assessment
- Authentication and authorization verification
- Session management analysis
- Input validation testing
- Error handling evaluation
- Assessment of weak cryptography
- Business logic security testing
- Client-side security checks
- API security testing
Reporting Testing Assessments and Results
- Structuring the introduction section
- Writing a concise executive summary
- Detailing the findings section
- Preparing appendices
Getting Involved in the Web Security Testing Guide
- Referencing and linking to WSTG scenarios
- Observing the code of conduct
- Following the contribution guide
- Submitting feature requests and feedback
Summary and Conclusion
Requirements
- A solid understanding of the web development lifecycle.
- Practical experience in web application development, security practices, and testing.
Target Audience
- Developers
- Engineers
- Architects
Testimonials (2)
The training helped me expand my knowledge and understanding of Burp Suite. I also realized that what I had learned through self-study was still quite limited. This training was very helpful to me as a QA because Burp Suite is a valuable tool for performing security testing and improving the overall quality of application testing. I will continue exploring this tool and learning more about its features and capabilities.
Rea Mendez - BAKAWAN Data Anallytics Inc.
Course - OWASP Top 10 2025
I really enjoyed learning about AI attacks and the tools out there to begin practicing and actively using for security testing. I took a lot of knowledge away which I didn't have at the beginning and the course met what I hoped it would be. My favorite part shown from the training was Comet Browser and was amazed at what it could do. Definitely something will be looking into more. Overall it was a great course and enjoyed learning all OWASP GenAI Top 10.
