BONUS! Cyber Phoenix Subscription Included: All Phoenix TS students receive complimentary ninety (90) day access to the Cyber Phoenix learning platform, which hosts hundreds of expert asynchronous training courses in Cybersecurity, IT, Soft Skills, and Management and more!
Course Overview
OSWA Certification
Learn the foundations of web application assessments with Foundational Web Application Assessments with Kali Linux (WEB-200). Learners who complete the course and pass the exam will earn the OffSec Web Assessor (OSWA) certification and will demonstrate their ability to leverage web exploitation techniques on modern applications. This course teaches learners how to discover and exploit common web vulnerabilities and how to exfiltrate sensitive data from target web applications. Learners that complete the course will obtain a wide variety of skill sets and competencies for web app assessments. This course is intended for Web Penetration Testers, Pentesters, Web Application Developers, Application Security Analysts, Application Security Architects, and SOC Analysts and other blue team members. At the completion of this course, participants will be able to:
- Acquire a diverse range of skills and competencies necessary for conducting assessments of web applications.
- Gain proficiency in foundational Black Box enumeration and exploitation methods.
- Utilize contemporary web exploitation techniques effectively, particularly tailored for modern applications.
Schedule
Currently, there are no public classes scheduled. Please contact a Phoenix TS Training Consultant to discuss hosting a private class at 301-258-8200.
Program Level
Beginner
Prerequisites
- WEB-100: Web Application Basics
- WEB-100: Linux Basics 1 & 2
- WEB-100: Networking Basics
Course Outline
Tools for the Web Assessor
Cross-Site Scripting (XSS) Introduction, Discovery, Exploitation and Case Study
Cross-Site Request Forgery (CSRF)
Exploiting CORS Misconfigurations
Database Enumeration
SQL Injection (SQLi)
Directory Traversal
XML External Entity (XXE) Processing
Server-Side Template Injection (SSTI)
Server-Side Request Forgery (SSRF)
Command Injection
Insecure Direct Object Referencing
Assembling the Pieces: Web Application Assessment Breakdown
Exam Information
- The OSWA exam is a proctored exam
- The WEB-200 course and online lab prepares you for the OSWA certification
- You must obtain at least 70 points to pass the exam.
BONUS! Cyber Phoenix Subscription Included: All Phoenix TS students receive complimentary ninety (90) day access to the Cyber Phoenix learning platform, which hosts hundreds of expert asynchronous training courses in Cybersecurity, IT, Soft Skills, and Management and more!
Phoenix TS is registered with the National Association of State Boards of Accountancy (NASBA) as a sponsor of continuing professional education on the National Registry of CPE Sponsors. State boards of accountancy have final authority on the acceptance of individual courses for CPE credit. Complaints re-garding registered sponsors may be submitted to the National Registry of CPE Sponsors through its web site: www.nasbaregistry.org