SUMMARY.md

Table of contents

• eLearnSecurity Web Application Penetration Tester (eWPT)

Before Start

• Author
• TryHackMe Machines
• Hack The Box Machines
• Join Us - Discord
• Build Your Lab

1⃣ Introduction

• HTTP Cookies and Sessions
• Same Origin Policy
• Burp Suite
• OWASP Zap
• Introduction LAB

2⃣ Information Gathering

• 😀 Information Gathering - Study Guide
• 😀 Web Application Information Gathering
• 😀 Subdomain Enumeration
• 😀 Web Application Fingerprint
• 😀 Crawling and Spidering
• 😀 Dirbuster
• Information Gathering - LAB

3⃣ Cross Site Scripting

• Cross Site Scripting - Study
• XSS Reflected and Persistent
• XSS DOM
• BEEF
• Cross Site Scripting - LAB

4⃣ SQL Injections

• Page 2

5⃣ Authentication and Authorization

• Page 3

6⃣ Session Security

• Page 4

7⃣ Flash

• Flash - Study Guide
• Flash Security and Attacks

8⃣ HTML5

• Page 6

9⃣ File and Resources Attacks

• File and Resources Attacks - Study Guide
• File and Resources Attacks - Study
• File and Resources Attacks - LAB

🔟 Other Attacks

• Other Attacks - Study Guide
• Clickjacking
• Other Attacks

Web Services

• Web Services - Study Guide
• Web Services: SOAP
• Web Services

XPath

• XPath - Study Guide
• XPATH and XCAT
• XPath

Penetration Testing Content Management Systems

• 😀 Penetration Testing Content Management Systems - Study Guide
• Capturing WordPress Credentials for Lateral Movement
• Exploiting a Vulnerability in WordPress Core
• Exploiting WordPress
• Chaining Vulnerabilities To Remotely Extract WP Admin Credentials

Penetration Testing NoSQL Databases

• Penetration Testing NoSQL Databases - Study Guide
• Redis Exploitation - LAB
• NoSQL Injections Against MongoDB - LAB
• CouchDB Exploitation - LAB