1. Application Security Fundamentals
Introduction to the course
()
Chapter introduction
()
Intro to application security fundamentals
()
Security testing in the SDLC
()
OWASP Top 10 deep dive
()
2. Static Application Security Testing (SAST)
SAST fundamentals and tool selection
()
Hands-on SAST with SpotBugs
()
SAST results analysis and CVSS scoring
()
3. Secure Code Review and Manual Analysis
Manual security code review process
()
OWASP code review tools workshop
()
Security audit standards and compliance
()
4. Security Debugging Fundamentals
Chapter introduction
()
Systematic Debugging for security
()
White-box debugging techniques
()
Runtime security analysis
()
5. Vulnerability Discovery Through Debugging
Authentication flow debugging
()
Interactive debugging in web applications
()
Advanced exploit analysis
()
6. Automated Security Integration
DevSecOps pipeline integration
()
CodeQL and advanced static analysis
()
Security test automation architecture
()
7. Dynamic Application Security Testing (DAST)
Chapter introduction
()
DAST methodology and black-box testing
()
ZAP professional workshop
()
Hybrid testing: Automated and manual techniques
()
8. Penetration Testing Fundamentals
Penetration testing methodology
()
Burp suite professional techniques
()
WebGoat exploitation laboratory
()
9. Advanced Exploitation Techniques
Authentication and session security testing
()
Business logic and race condition testing
()
Injection attack mastery
()
10. Security Report Development
Chapter introduction
()
Executive security reporting
()
CVSS scoring and risk quantification
()
Remediation strategy development
()
11. Case Study Analysis
OWASP code review tools workshop
()
Enterprise penetration testing case study
()
DevSecOps transformation case study
()
12. Professional Development and Best Practices
ISTQB security testing standards
()
Career development in security testing
()
Building security culture
()
Ex_Files_Application_Security_Testing.zip
(130 KB)