Web Application Penetration Tester eXtreme

Encoding and Filtering

Evasion Basics

XSS

XSS - Filter Evasion and WAF Bypassing

CSRF (XSRF)

HTML5

SQL Injection

SQLi - Filter Evasion and WAF Bypassing

XXE - XML Attacks

Attacking Serialization

Server Side Attacks

Attacking Crypto

Attacking Authentication & SSO

Pentesting APIs & Cloud Applications

Attacking LDAP-based Implementations