OWASP Web Security Testing Training in Kuala Lumpur

OWASP Web Security Testing Training in Kuala Lumpur, Malaysia

This course provides in-depth knowledge and hands-on practice in web application penetration testing using the OWASP Web Security Testing Guide (WSTG) and OWASP Top 10 standards.

Enroll Now

OWASP Web Security Testing Training is a professional training program delivered by ProgNXT in Kuala Lumpur, Malaysia. ProgNXT, a globally recognized corporate training provider in 55+ countries, offers this OWASP Web Security Testing Training course with hands-on, instructor-led sessions. This course provides in-depth knowledge and hands-on practice in web application penetration testing using the OWASP Web Security Testing Guide...

Expert Panel

Designed and delivered by the ProgNXT Cyber Security Expert Panel — a vetted team of industry professionals with 17+ years of hands-on experience in ethical hacking, penetration testing, Kali Linux, and network security

ProgNXT Cyber Security Expert Panel

Course Code: TKV65
21 Hrs
Last Updated: April 2026

Course Rating5/5

This course provides in-depth knowledge and hands-on practice in web application penetration testing using the OWASP Web Security Testing Guide (WSTG) and OWASP Top 10 standards. Participants will learn to identify, exploit, and mitigate common web vulnerabilities, conduct secure code reviews, and perform both manual and automated testing of modern web applications. The course emphasizes real-world scenarios to prepare participants for professional security assessments and compliance requirements.

Welcome to the official OWASP Web Security Testing Training certification program in Kuala Lumpur, Malaysia. This comprehensive training is designed to elevate your professional skills and provide you with practical, industry-relevant knowledge locally. As a globally recognized corporate training provider operating in 55+ countries, ProgNXT ensures that our curriculum meets the highest standards of excellence.

Whether you are looking to upskill your team or advance your personal career, our expert-led sessions will guide you through the core concepts of this domain. Upon successful completion of the 21 Hrs program, participants will receive a globally accepted certification, demonstrating their proficiency and readiness to tackle complex challenges in the field.

Basic knowledge of web technologies (HTML, CSS, JavaScript, HTTP/HTTPS).
Familiarity with databases and APIs.
Understanding of basic security principles (authentication, encryption).
Some prior exposure to penetration testing tools (e.g., Burp Suite, SQLMap) is beneficial but not mandatory.

By the end of this course, participants will be able to:

Understand OWASP Top 10 and WSTG methodologies.
Identify and exploit common web application vulnerabilities.
Perform manual and automated penetration tests on web apps.
Secure applications using industry best practices and secure coding.
Generate professional penetration testing and vulnerability assessment reports.

Web application penetration testing skills.
Proficiency in using tools such as Burp Suite, OWASP ZAP, SQLMap, Nikto, Nmap, wfuzz.
Hands-on testing for OWASP Top 10 vulnerabilities.
Secure coding validation against OWASP standards.
Exploit development for common web flaws.
Professional security reporting and remediation guidance.

OWASP Top 10 vulnerabilities and WSTG methodology.
Manual exploitation of authentication, injection, and session issues.
Automated scanning with Burp Suite/ZAP.
Secure coding validation against OWASP standards.
Reporting vulnerabilities in professional formats.

Participants who attend all sessions and successfully complete the course assessments will receive a ProgNXT Certificate of Completion.

Foundations & Testing Methodology

Introduction to Web Application Security
- Web threat landscape
- OWASP Top 10 & WSTG overview
- Attack surface of web applications
Testing Infrastructure and Setup
- Lab setup with vulnerable apps (DVWA, Juice Shop, WebGoat)
- Tools: Burp Suite, ZAP, SQLMap, wfuzz
- Setting up intercepting proxies
Information Gathering & Reconnaissance
- Fingerprinting technologies & frameworks
- Directory/file enumeration
- Identifying hidden parameters and endpoints
Testing Authentication & Session Management
- Weak login implementations
- Session fixation, session hijacking
- Multi-factor authentication testing

OWASP Top 10 Vulnerability Testing

Injection Flaws
- SQL Injection, Command Injection, LDAP Injection
- Tools and exploitation techniques
Cross-Site Scripting (XSS)
- Reflected, stored, and DOM-based XSS
- Payload crafting & bypass techniques
Broken Access Control
- IDORs (Insecure Direct Object References)
- Privilege escalation testing
Cross-Site Request Forgery (CSRF)
- Exploitation of trust in authenticated users
- Mitigation strategies
Security Misconfigurations
- Common server and framework misconfigurations
- Automated scanning with Nikto and Nmap

Advanced Testing & Reporting

Testing Cryptography & Data Security
- Insecure data storage
- Weak TLS/SSL configurations
- Improper cryptographic usage
Testing APIs & Modern Web Apps
- REST & GraphQL API testing
- JWT and token-based authentication flaws
- Case study: API misconfiguration
Testing Business Logic Flaws
- Logical bypass attacks
- Abuse of workflows (e.g., coupon reuse, price manipulation)
Reporting & Remediation
- Writing professional penetration testing reports
- Mapping findings to OWASP WSTG & Top 10
- Best practices for remediation

Hands-on Exercises

Summary and Conclusion

Official OWASP Web Security Testing Guide.
OWASP Top 10 documentation.
Pre-configured vulnerable labs
Slide deck, lab handouts, and case studies.

Quizzes
Hands-on labs

ProgNXT Certificate of Completion will be awarded to participants who attend all sessions and successfully complete the course assessments.

OWASP Web Security Testing Training Events in kuala-lumpur

Online Events

Global Region	Location	Start Date	End Date	Action
‌	‌	‌	‌	‌
‌	‌	‌	‌	‌
‌	‌	‌	‌	‌
‌	‌	‌	‌	‌
‌	‌	‌	‌	‌

More Upcoming Session Dates

November 2026

🌐 Online Instructor-Led

2nd Nov 2026→4th Nov 2026

📍 Kuala Lumpur, Malaysia

8th Nov 2026→10th Nov 2026

🌐 Online Instructor-Led

22nd Nov 2026→24th Nov 2026

📍 Kuala Lumpur, Malaysia

25th Nov 2026→27th Nov 2026

December 2026

📍 Kuala Lumpur, Malaysia

5th Dec 2026→7th Dec 2026

🌐 Online Instructor-Led

11th Dec 2026→13th Dec 2026

🌐 Online Instructor-Led

23rd Dec 2026→25th Dec 2026

📍 Kuala Lumpur, Malaysia

26th Dec 2026→28th Dec 2026

Events for other courses in Kuala Lumpur, Malaysia

Global Region	Course Name	Start Date	End Date	Action
‌	‌	‌	‌	‌
‌	‌	‌	‌	‌
‌	‌	‌	‌	‌
‌	‌	‌	‌	‌
‌	‌	‌	‌	‌

OWASP Web Security Testing Training in Kuala Lumpur