Cybersecurity · Intermediate · 12 live learning hours

Certificate of completion

Learners who meet the course participation and practical assessment requirements receive a Solid Elf certificate of completion.

What you will learn

  • Understand HTTP, sessions and the client-server trust model
  • Map an authorised web application attack surface using OWASP ZAP
  • Inspect and modify requests safely with Burp Suite
  • Recognise and validate common OWASP Top 10 weaknesses in a lab environment
  • Write clear findings and recommend practical fixes

Course outline

  1. Session 1: HTTP mechanics, sessions, cookies and trust boundaries
  2. Session 2: Attack-surface mapping, crawling and proxy setup with OWASP ZAP
  3. Session 3: Intercepting and analysing requests with Burp Suite
  4. Session 4: Injection and input-validation failures in controlled labs
  5. Session 5: Cross-site scripting, authentication and access-control weaknesses
  6. Session 6: Evidence, remediation, secure coding guidance and retesting

Practical project

Complete an authorised assessment of a deliberately vulnerable training application and produce an evidence-based remediation report.

Before you start

Basic understanding of web applications, HTTP and networking. All testing is performed only in authorised training environments.

Learning format

12 live learning hours delivered as six 2-hour sessions. Cohort dates and meeting days are agreed during enrolment.

Exercises should use synthetic, de-identified or otherwise authorised material. Do not bring confidential client records or live credentials into a training session.

What the fee includes

Live tuition, guided labs, practice targets, reporting templates, feedback and a certificate of completion for learners who meet the participation and assessment requirements. Internet access is not included.

Software and reference material

Explore official reference material ↗. Training is independently offered by Solid Elf; no software-vendor accreditation or certification is claimed unless explicitly stated.

Continue learning

Explore the related consultancy service, browse practical articles, or view our free workshops.