Catalogue · MOD-OFF-04

Advanced WebApp Hacking & API

Beyond classic flaws, the web expert must chain vulnerabilities and master modern API security. This demanding module takes you there: RCE, advanced injections, GraphQL/REST, SSRF, business logic.

Offensive (Red) Expert 6 bricks 10 labs ≈ 21.2 h 5 real cases

Objectives

• Achieve RCE by chaining flaws • Exploit advanced injections and bypass a WAF • Test API security (REST/GraphQL) • Exploit SSRF and business logic

Module bricks

BRQ-OFF-016 — Remote code execution & chaining (ysoserial) (2 lab(s))
BRQ-OFF-017 — Advanced SQL injection & WAF bypass (2 lab(s))
BRQ-OFF-018 — API security (GraphQL/REST) (2 lab(s))
BRQ-OFF-019 — SSRF & internal network access (1 lab(s))
BRQ-OFF-020 — Client-side attacks & business logic (BeEF) (2 lab(s))
BRQ-OFF-021 — Advanced audit reporting (1 lab(s))

Order this module View full catalogue