The goal of SEC542 is to better secure organizations through penetration testing, and not just show off hacking skills. Information security professionals often struggle with helping their organizations understand risk in terms relatable to business. Along the way, students follow a field-tested and repeatable process to consistently find flaws. Students will come to understand common web application flaws, as well as how to identify and exploit them with the intent of demonstrating the potential business impact. SEC542 gives novice students the information and skills to become expert penetration testers with practice, and fills in all the foundational gaps for individuals with some penetration testing background. Anyone can learn to sling a few web hacks, but effective web application penetration testing requires something deeper. Modern cyber defense requires a realistic and thorough understanding of web application security issues. SEC542 enables students to assess a web application's security posture and convincingly demonstrate the business impact should attackers exploit discovered vulnerabilities. Adversaries increasingly focus on these high-value targets either by directly abusing public-facing applications or by focusing on web apps as targets after an initial break-in.

Unfortunately, there is no 'patch Tuesday' for custom web applications, so major industry studies find that web application flaws play a major role in significant breaches and intrusions. Even beyond the importance of customer-facing web applications, internal web applications increasingly represent the most commonly used business tools within any organization.

SEC542 helps students move beyond push-button scanning to professional, thorough, high-value web application penetration testing.Ĭustomers expect web applications to provide significant functionality and data access. Unfortunately, many organizations operate under the mistaken impression that a web application security scanner will reliably discover flaws in their systems. But, if your organization does not properly test and secure its web apps, adversaries can compromise these applications, damage business functionality, and steal data. Web applications play a vital role in every modern organization. Immediately apply the skills and techniques learned in SANS courses, ranges, and summits

Burp professional price