Web Penetration Tester

The certification associated with this course is the HTB Certified Web Exploitation Specialist (HTB CWES) (Previously known as the Certified Bug Bounty Hunter (HTB CBBH)).

Hack Responsibly.

Always ensure you have explicit permission to access any computer system before using any of the techniques contained in these documents. You accept full responsibility for your actions by applying any knowledge gained here.

These will be the notes I felt were worth writing down as things I was not completely familiar with and/or were new to me at the time of working through this course.

Some sections may be empty due to nothing being worth noting IMO.

Table of Contents

CWES - Modules
Module 1: Web Requests
Module 2: Introduction to Web Applications
Module 3: Using Web Proxies
Module 4: Information Gathering - Web Edition
Module 5: Web Fuzzing
Module 6: JavaScript Deobfuscation
Module 7: Cross-Site Scripting (XSS)
Module 8: SQL Injection Fundamentals
Module 9: SQLMap Essentials
Module 10: Command Injections
Module 11: File Upload Attacks
Module 12: Server-Side Attacks
Module 13: Login Brute Forcing
Module 14: Broken Authentication
Module 15: Web Attacks
Module 16: File Inclusion
Module 17: Attacking GraphQL
Module 18: API Attacks
Module 19: Attacking Common Applications
Module 20: Bug Bounty Hunting Process