Web Security

Master HTTP/HTTPS internals — request/response structure, security headers, cookie attributes, Same-Origin Policy, CORS, and how attackers exploit each.

Master Burp Suite Community Edition for web application security testing — intercepting, modifying, and replaying HTTP traffic to find vulnerabilities.

Deep dive into SQL injection — in-band, blind, out-of-band, second-order, and WAF bypass techniques — with sqlmap and full defensive countermeasures.

Master all three types of XSS — reflected, stored, and DOM-based — including filter bypass, CSP bypass, advanced payloads for cookie theft and keylogging, and robust defenses.

Learn how prototype pollution corrupts the JavaScript prototype chain, how a 'gadget' turns it into XSS, and the exact origin-validation mistake that breaks postMessage.

Understand and exploit Cross-Site Request Forgery and Clickjacking — two attacks that abuse browser trust — and implement robust defenses for each.

Explore and exploit authentication vulnerabilities — JWT attacks (alg:none, weak secrets, kid injection), OAuth misconfigurations, session management flaws, and MFA bypass techniques.

Learn to identify and exploit Server-Side Request Forgery (SSRF) to access internal services and cloud metadata, and XML External Entity (XXE) injection to read local files and conduct SSRF.

Exploit insecure file upload features to achieve remote code execution, and use path traversal to read arbitrary server files — plus robust defense strategies.

Exploit OS command injection to achieve remote code execution, and Server-Side Template Injection (SSTI) in Jinja2, Twig, and Freemarker to escape sandboxes and execute arbitrary code.

Identify and exploit business logic flaws and Insecure Direct Object References — vulnerabilities that scanners miss because they require understanding how the application is supposed to work.

Understand how WAFs work and how attackers bypass them using encoding, obfuscation, protocol-level tricks, and application-specific evasion — enabling realistic security assessments.

Exploit disagreements between front-end and back-end servers about where one HTTP request ends and the next begins — and understand why it's a favorite WAF-bypass technique.

Systematically test REST and GraphQL APIs for security vulnerabilities — broken authentication, IDOR, mass assignment, excessive data exposure, injection, and GraphQL-specific attacks.

Understand introspection leaks, query depth/complexity and batching attacks, why authorization must be per-field, and persisted queries as production lockdown.

Reentrancy, access control bugs, integer overflow/underflow, and oracle manipulation — why immutable, financially-loaded smart contract bugs are uniquely unforgiving.