logo-img
  • In trainingen zoeken...
  • No direct match found.
    Let AI search for a suitable alternative via Enter or the search button.
We are looking for the best courses for you…
All Trainings
All Trainings
  • In trainingen zoeken...
  • No direct match found.
    Let AI search for a suitable alternative via Enter or the search button.
We are looking for the best courses for you…
NL / EN
OSWA Training (WEB-200) - Foundational Web Application Assessments with Kali Linux

OSWA Training (WEB-200) - Foundational Web Application Assessments with Kali Linux

365 days Self study Engels

Sharpest price in just 2 steps

Requesting more information and/or the current price of this training is easy. We take into account any ongoing promotions, subsidies, or relationship discounts.
1 of 2
2 van 2

Why OSWA Training (WEB-200) - Foundational Web Application Assessments with Kali Linux at TSTC?

  • You are training with the Netherlands' only OffSec Accredited Training Partner.
  • That’s why you will receive the official WEB-200 training that is guaranteed to align with the most current OSWA exam.
  • Including a 90-day or 1-year OffSec Learn One license with extra learning paths, one or two OSWA exam attempts, and 365 days of lab access.
  • Stops exclusively at TSTC automatically after 1 year, but can be extended or upgraded to Learn One with a new payment.
Training Summary

Description

In the online WEB-200 training from Offensive Security, you lay a thorough foundation in the field of web application assessments. You will learn, among other things, how to discover and exploit common web vulnerabilities and how to exfiltrate sensitive data from targeted web applications. Students who complete the course acquire a wide range of skills and competencies for conducting web application assessments.

This official Offensive Security training is only available online through self-study. Through the LearnOne subscription, you receive one year of access to the training, videos, and advanced lab environment. Additionally, two exam attempts are included, allowing you to obtain the corresponding OffSec Web Assessor (OSWA) certification, which demonstrates your ability to use web exploitation techniques in modern applications. A classroom alternative to this training is our 4-day (Web)Application Security Assessment training based on the OWASP Testing Guide.

 

Duration of training

You have the choice between two variants of this training:

  • 90 days access to the training and labs plus one exam attempt
  • 365 days access to the training, labs, extra foundation trainings, and two exam attempts 

 

Certification

This training prepares you for Offensive Security's OSWA - OffSec Web Assessor practical exam. You have 23 hours and 45 minutes for this exam. After the exam, you have another 24 hours to prepare and submit the report containing your findings. The OSWA exam simulates a live network that contains multiple vulnerable systems. You must exploit these machines and provide proof of exploitation. The goal of the certification challenge is to think creatively and demonstrate that you can successfully penetrate (web application) targets.

Training Requirements

  • Web Penetration Testers
  • Pentesters
  • Web Application Developers
  • Application Security Analysten
  • Application Security Architecten
  • SOC Analysts
  • Iedereen die interesse heeft in het uitbreiden van zijn kennis op het gebied van web applicatie aanvallen en/of infra pentesters die hun vaardigheden en Web App expertise willen verbreden.
  • Basiskennis van Linux, netwerken en scripting is sterk aanbevolen, omdat dit het leerproces aanzienlijk vergemakkelijkt.

Materials

Training Content

Doe praktische ervaring op met industriestandaard tools die worden gebruikt door web application penetration testers.

Leer hoe aanvallers kwaadaardige code in webpagina’s injecteren om gebruikerssessies over te nemen, gevoelige data te stelen of websites te misvormen.

Ontdek hoe aanvallers ingelogde gebruikers in webapplicaties misleiden en leer hoe je CSRF-kwetsbaarheden kunt herkennen en misbruiken.

Begrijp hoe je CORS-fouten kunt identificeren en oplossen om webapplicaties beter te beveiligen.

Leer technieken die aanvallers gebruiken om gevoelige informatie over de databasestructuur van een webapplicatie te achterhalen, en hoe je dit kunt voorkomen.

Misbruik kwetsbaarheden in webapplicaties via SQL-injecties en leer hoe je dit soort aanvallen kunt voorkomen en beperken.

Leer hoe je directory traversal-kwetsbaarheden herkent en exploiteert, en hoe je voorkomt dat aanvallers toegang krijgen tot afgeschermde delen van je webserver.

Leer hoe aanvallers XML-processors misbruiken om invoer te manipuleren, en hoe je XML-parsers beveiligt tegen XXE-kwetsbaarheden.

Leer hoe je SSTI-kwetsbaarheden identificeert en exploiteert, en hoe je je applicaties hiertegen beschermt.

Begrijp verschillende SSRF-aanvalsvectoren en leer hoe je passende tegenmaatregelen implementeert.

Leer hoe aanvallers misbruik maken van command injection-kwetsbaarheden en wat de impact hiervan kan zijn op de integriteit van systemen. Oefen met het herkennen, exploiteren en beperken van dit soort kwetsbaarheden.

Leer hoe je objectreferenties veilig beheert om te voorkomen dat aanvallers toegang krijgen tot privégegevens of ongeautoriseerde acties uitvoeren.

Combineer en verdiep de verschillende aanvalstechnieken en assessment-methodes die je gedurende de cursus hebt geleerd om een volledig beeld van webapplicatiebeveiliging te krijgen.

Description

In the online WEB-200 training from Offensive Security, you lay a thorough foundation in the field of web application assessments. You will learn, among other things, how to discover and exploit common web vulnerabilities and how to exfiltrate sensitive data from targeted web applications. Students who complete the course acquire a wide range of skills and competencies for conducting web application assessments.

This official Offensive Security training is only available online through self-study. Through the LearnOne subscription, you receive one year of access to the training, videos, and advanced lab environment. Additionally, two exam attempts are included, allowing you to obtain the corresponding OffSec Web Assessor (OSWA) certification, which demonstrates your ability to use web exploitation techniques in modern applications. A classroom alternative to this training is our 4-day (Web)Application Security Assessment training based on the OWASP Testing Guide.

 

Duration of training

You have the choice between two variants of this training:

  • 90 days access to the training and labs plus one exam attempt
  • 365 days access to the training, labs, extra foundation trainings, and two exam attempts 

 

Certification

This training prepares you for Offensive Security's OSWA - OffSec Web Assessor practical exam. You have 23 hours and 45 minutes for this exam. After the exam, you have another 24 hours to prepare and submit the report containing your findings. The OSWA exam simulates a live network that contains multiple vulnerable systems. You must exploit these machines and provide proof of exploitation. The goal of the certification challenge is to think creatively and demonstrate that you can successfully penetrate (web application) targets.

Training Requirements

  • Web Penetration Testers
  • Pentesters
  • Web Application Developers
  • Application Security Analysten
  • Application Security Architecten
  • SOC Analysts
  • Iedereen die interesse heeft in het uitbreiden van zijn kennis op het gebied van web applicatie aanvallen en/of infra pentesters die hun vaardigheden en Web App expertise willen verbreden.
  • Basiskennis van Linux, netwerken en scripting is sterk aanbevolen, omdat dit het leerproces aanzienlijk vergemakkelijkt.

Training Content

Doe praktische ervaring op met industriestandaard tools die worden gebruikt door web application penetration testers.

Leer hoe aanvallers kwaadaardige code in webpagina’s injecteren om gebruikerssessies over te nemen, gevoelige data te stelen of websites te misvormen.

Ontdek hoe aanvallers ingelogde gebruikers in webapplicaties misleiden en leer hoe je CSRF-kwetsbaarheden kunt herkennen en misbruiken.

Begrijp hoe je CORS-fouten kunt identificeren en oplossen om webapplicaties beter te beveiligen.

Leer technieken die aanvallers gebruiken om gevoelige informatie over de databasestructuur van een webapplicatie te achterhalen, en hoe je dit kunt voorkomen.

Misbruik kwetsbaarheden in webapplicaties via SQL-injecties en leer hoe je dit soort aanvallen kunt voorkomen en beperken.

Leer hoe je directory traversal-kwetsbaarheden herkent en exploiteert, en hoe je voorkomt dat aanvallers toegang krijgen tot afgeschermde delen van je webserver.

Leer hoe aanvallers XML-processors misbruiken om invoer te manipuleren, en hoe je XML-parsers beveiligt tegen XXE-kwetsbaarheden.

Leer hoe je SSTI-kwetsbaarheden identificeert en exploiteert, en hoe je je applicaties hiertegen beschermt.

Begrijp verschillende SSRF-aanvalsvectoren en leer hoe je passende tegenmaatregelen implementeert.

Leer hoe aanvallers misbruik maken van command injection-kwetsbaarheden en wat de impact hiervan kan zijn op de integriteit van systemen. Oefen met het herkennen, exploiteren en beperken van dit soort kwetsbaarheden.

Leer hoe je objectreferenties veilig beheert om te voorkomen dat aanvallers toegang krijgen tot privégegevens of ongeautoriseerde acties uitvoeren.

Combineer en verdiep de verschillende aanvalstechnieken en assessment-methodes die je gedurende de cursus hebt geleerd om een volledig beeld van webapplicatiebeveiliging te krijgen.

shape

I am taking this next step in my lifelong learning journey.

OSWA Training (WEB-200) - Foundational Web Application Assessments with Kali Linux

Enrollment Form

1

Applicant Information

2

Billing Information

What Can I Learn After The OSWA Training (WEB-200) - Foundational Web Application Assessments with Kali Linux?

  • Learners will obtain a wide variety of skill sets and competencies for Web App Assessments.
  • Enumerate web applications and four common database management systems.
  • Exploit six different templating engines, often leading to RCE.
  • Applying offensive JavaScript techniques for exploiting web applications.
  • Learners will leverage modern web exploitation techniques on modern applications.
  • Manually discover and exploit common web application vulnerabilities
  • Tools such as Burp Suite, Nmap, and Gobuster are used for testing web applications.
  • Learners will learn foundational Black Box enumeration and exploitation techniques.
  • Go beyond alerts and actually exploit other users with cross-site scripting.
  • Perform file, directory, and parameter discovery using tools like Wfuzz and Hakrawler.

Schedules

This training is scheduled as follows in the coming period. Missing a date? Feel free to contact us.

Date: Elk moment te starten (90 dagen labtoegang + 1 examenpoging)

Price: € 1.749,- ex BTW € 1.599,- ex BTW

Date: Elk moment te starten (Learn One, 365 dagen labtoegang + 2 examenpogingen)

Price: € 2.749,- ex BTW € 2.499,- ex BTW

OSWA Training (WEB-200) - Foundational Web Application Assessments with Kali Linux

Enrollment Form

1

Applicant Information

2

Billing Information

Shape

Frequently Asked Questions

No, when registering you choose between 90 or 365 days of access to the materials. After this period, your access will automatically expire, after which you can extend it with us for an additional fee if needed.

Yes, during the chosen period, you have a one-time opportunity to download the course materials in PDF and the corresponding videos. You can make a request for this in your OffSec learning portal. We advise you to submit the request at least ten days before the end of your term, as the option is no longer guaranteed after that. After receiving an email notification from OffSec, you have 72 hours to download the materials so that you still have access even after the 90 or 365 days have expired. The lab environment is NOT downloadable, but it can be extended for an additional fee.

Yes, this is possible for a fee through TSTC. Please keep in mind a 'cooling-off' period during which you are not allowed to retake the exam. The length of this period depends on the number of attempts you have made for the specific exam.

I am taking this next step in my lifelong learning journey.

OSWA Training (WEB-200) - Foundational Web Application Assessments with Kali Linux

Enrollment Form

1

Applicant Information

2

Billing Information

Related Trainings

(Web)Application Security Assessment - Based on OWASP Testing Guide Alternatieve training

(Web)Application Security Assessment - Based on OWASP Testing Guide
OSCP training (PEN-200) - Pentesting with Kali Linux (PWK) Mogelijke voorbereiding

OSCP training (PEN-200) - Pentesting with Kali Linux (PWK)
OSAI training (AI-300) - Advanced AI Red Teaming Vervolgtraining

OSAI training (AI-300) - Advanced AI Red Teaming
Why experienced professionals choose TSTC for their studies

Train smarter, not harder. TSTC's unique approach guarantees the effective acquisition of skills and the greatest chance of success.

Learn more about TSTC
Toucan Rhino