WebApp PenTest Playbook

Course Information

Course Instructor

sava_resources Author

Introduction

Introduction

00 – Machine Setup

Machine Setup

01 – Tools Reference

Tools Reference

02 – Engagement Methodology

Engagement Methodology

03 – Attacks

01 – Reconnaissance & Enumeration

02 – Authentication Attacks

03 – Authorization Attacks (Access Control)

04 – Injection Attacks

05 – API Testing

06 – File Upload Attacks

07 – Business Logic Attacks

08 – Session Management & CSRF

09 – Infrastructure & Misconfiguration

04 – Reporting

Reporting

05 – Cheatsheets & Quick Reference

Cheatsheets & Quick Reference