SUMMARY.md

Table of contents

• eLearnSecurity Web Application Penetration Tester (eWPT)

Before Start

• Author
• TryHackMe Machines
• Hack The Box Machines
• Join Us - Discord
• Build Your Lab

1️⃣ Introduction

• HTTP Cookies and Sessions
• Same Origin Policy
• Burp Suite
• OWASP Zap
• Introduction LAB

2️⃣ Information Gathering

• 😀 Information Gathering - Study Guide
• 😀 Web Application Information Gathering
• 😀 Subdomain Enumeration
• 😀 Web Application Fingerprint
• 😀 Crawling and Spidering
• 😀 Dirbuster
• Information Gathering - LAB

Web Proxies

• Page 1

3️⃣ Cross Site Scripting

• Cross Site Scripting - Study
• XSS Reflected and Persistent
• XSS DOM
• BEEF
• Cross Site Scripting - LAB

4️⃣ SQL Injections

• Page 2

5️⃣ Authentication and Authorization

• Page 3

6️⃣ Session Security

• Page 4

7️⃣ Flash

• Flash - Study Guide
• Flash Security and Attacks

8️⃣ HTML5

• Page 6

9️⃣ File and Resources Attacks

• File and Resources Attacks - Study Guide
• File and Resources Attacks - Study
• File and Resources Attacks - LAB

🔟 Other Attacks

• Other Attacks - Study Guide
• Clickjacking
• Other Attacks

Web Services

• Web Services - Study Guide
• Web Services: SOAP
• Web Services

XPath

• XPath - Study Guide
• XPATH and XCAT
• XPath

Penetration Testing Content Management Systems

• 😀 Penetration Testing Content Management Systems - Study Guide
• Capturing WordPress Credentials for Lateral Movement
• Exploiting a Vulnerability in WordPress Core
• Exploiting WordPress
• Chaining Vulnerabilities To Remotely Extract WP Admin Credentials

Penetration Testing NoSQL Databases

• Penetration Testing NoSQL Databases - Study Guide
• Redis Exploitation - LAB
• NoSQL Injections Against MongoDB - LAB
• CouchDB Exploitation - LAB