OWASP Top 10, Burp workflows and hands-on exploitation.
OWASP Top 10
Category-by-category breakdown with practical examples.
SQL Injection
Union, error-based, blind and time-based exploitation.
Cross-Site Scripting
Reflected, stored and DOM XSS with bypass techniques.
Authentication Attacks
Credential stuffing, JWT flaws, session fixation, MFA bypass.
File Upload Attacks
Extension and content-type bypasses to remote code execution.
API Security
REST/GraphQL testing, BOLA/IDOR, rate limiting, mass assignment.