The Java Web Applications Security Auditing training will enable participants with the knowledge and skills necessary to audit and assess Java Web Applications.
The training will involve using the popular WebGoat lab to test various web application vulnerabilities and the recommended approach to secure the risks based on the OWASP Top 10.
- Auditing Client HTTP requests and Server Responses
- Auditing Login Security Using Automated Brute Force
- Auditing Input Data Validation Using Remote Command Execution (RCE) / Injection
- Auditing Insecure Direct Object References (IDOR)
- Auditing Remote File Execution Using Directory Traversal
- Auditing File Upload Vulnerabilities
- Auditing Input Data Validation Using SQL Injection
- Auditing Input Data Validation Using Cross Site Scripting (XSS)
- Auditing for Sensitive Data Stored on Browsers (Cookies, Cache, etc.)
- Auditing API Endpoints
- Auditing API Access and Permissions
- Auditing Java Security Misconfigurations
- Auditing Sensitive Data Protection through TLS Configuration
