Understand and discover various types of Cross-Site Scripting (XSS) vulnerabilities
Exploit XSS vulnerabilities by injecting and executing malicious scripts
Comprehend and identify SQL Injection points and exploit them to manipulate database queries
Utilize fuzzing tools to discover SQL Injection vulnerabilities
Learn the Same-Origin Policy and how it interacts with cross-origin requests
Test and exploit Cross-Origin Resource Sharing (CORS) vulnerabilities
Identify and exploit Cross-Site Request Forgery (CSRF) vulnerabilities
Use tools like Burp Suite, Nmap, and Gobuster for web application testing
Perform file, directory, and parameter discovery using tools like Wfuzz and Hakrawler
Apply offensive JavaScript techniques for web application exploitation

The WEB-200 course is ideal for:

  • Security professionals seeking to enhance their web application security testing skills
  • Those with knowledge of web development technologies and familiarity with Linux systems

While there are no formal prerequisites, it’s strongly recommended that you have a basic understanding of:

  • Web development technologies (HTML, CSS, JavaScript)
  • Networking Fundamentals
  • Linux operating system basics

Up to 40 (ISC)² CPE credits.