Course Outline
Introduction
Overview of the Web Security Testing Guide
- The OWASP Testing Project
- Tailoring and prioritizing frameworks for organizations
- Core testing principles and techniques
- Security testing objectives and requirements
Exploring Various Testing Techniques
- Manual inspections and code reviews
- Threat modeling
- Source code analysis
- Penetration testing
- Integration of security tests and data analysis
Understanding the OWASP Testing Framework
- Activities spanning development to deployment
- Maintenance and operational phases
- End-to-end lifecycle testing framework and workflow
- Methodologies for penetration testing
Executing Web Application Security Testing
- Information gathering
- Configuration and deployment management testing
- Identity management testing
- Authentication and authorization testing
- Session management testing
- Input validation testing
- Error handling assessments
- Weak cryptography testing
- Business logic testing
- Client-side testing
- API testing
Documenting Testing Assessments and Results
- Introduction section
- Executive summary
- Detailed findings section
- Appendices
Contributing to the Web Security Testing Guide
- Referencing and linking WSTG scenarios
- Code of conduct
- Contribution guidelines
- Submitting feature requests and feedback
Summary and Conclusion
Requirements
- Foundational knowledge of the web development lifecycle
- Practical experience in web application development, security, and testing
Intended Audience
- Developers
- Engineers
- Architects
Testimonials (2)
The training helped me expand my knowledge and understanding of Burp Suite. I also realized that what I had learned through self-study was still quite limited. This training was very helpful to me as a QA because Burp Suite is a valuable tool for performing security testing and improving the overall quality of application testing. I will continue exploring this tool and learning more about its features and capabilities.
Rea Mendez - BAKAWAN Data Anallytics Inc.
Course - OWASP Top 10 2025
I really enjoyed learning about AI attacks and the tools out there to begin practicing and actively using for security testing. I took a lot of knowledge away which I didn't have at the beginning and the course met what I hoped it would be. My favorite part shown from the training was Comet Browser and was amazed at what it could do. Definitely something will be looking into more. Overall it was a great course and enjoyed learning all OWASP GenAI Top 10.
