Web App Penetration Testing Training in Kuala Lumpur, Malaysia

This course provides participants with the knowledge and skills to identify, exploit, and mitigate security flaws in web applications. It covers reconnaissance, vulnerability analysis, exploitation techniques, and secure coding practices using industry tools and hands-on labs. Participants will gain practical experience simulating real-world attacks and learn to prepare professional penetration test reports.

1. Introduction to Web App Pen Testing

   • Web application architecture & attack surface

   • OWASP Top 10 overview

2. Information Gathering & Reconnaissance

   • Mapping entry points & fingerprinting technologies

3. Vulnerability Analysis – Part 1

   • SQL Injection (SQLi)

   • Cross-Site Scripting (XSS)

   • Practical exploitation on DVWA/Juice Shop

4. Vulnerability Analysis – Part 2

   • Authentication & session flaws

   • Security misconfigurations & access controls

   • Insecure direct object references

5. Exploitation Tools & Techniques

   • Burp Suite, OWASP ZAP, SQLMap walkthrough

6. Post-Exploitation & Reporting

   • Privilege escalation scenarios

   • Writing professional pen test reports

Hands-on Exercises

Summary and Conclusion