Web Penetration Testing

Master web penetration testing with our dynamic training program. Learn to exploit vulnerabilities using cutting-edge techniques and tools like BurpSuite Pro and sqlmap. Gain expertise in HTTP protocols, SSL weaknesses, file-related vulnerabilities, injection attacks including SQLi/XXE, CSRF defense tactics, logic flaws analysis and more.

Face-to-Face Oct 1-2, 2025 9:00 AM - 5:00 PM Tarun Sukhani
updated
beginner
Web Penetration Testing
We price match

Public Pricing

MYR 3500

Corporate Pricing

Pax:

Training Fees: MYR 6500/day
Total Fees: MYR 13000 ++

Training Provider Pricing

Pax:

Training Fees: MYR 4800
Material Fees: MYR 400
Total Fees: MYR 5200

Features

2 days
14 modules
11 intakes
English

Subsidies

HRDC Claimable logo

What you'll learn

  • Develop proficiency in scripting for automation during penetration tests.
  • Execute sophisticated injection attacks such as SQLi/XXE.
  • Understand the basics of HTTP protocols and web application architectures.
  • Identify and exploit various file-related vulnerabilities including LFI/RFI.
  • Navigate complex authentication mechanisms and session management vulnerabilities.
  • Conduct effective information gathering using OSINT and other reconnaissance methods.
  • Implement CSRF mitigation strategies and understand logic flaw exploitation.
  • Utilize advanced penetration testing tools including Nmap, WPScan, Metasploit.

Why should you attend?

Web Penetration Testing is an essential skill set for security professionals seeking to identify and exploit vulnerabilities within web applications. This comprehensive course delves into the intricacies of various web technologies, equipping participants with a deep understanding of the HTTP protocol, encoding schemes, and state management mechanisms. Participants will explore the OWASP Top 10, CWE, and SANS 25 to comprehend the most critical web security risks. The course progresses by covering information gathering techniques using WHOIS, DNS reconnaissance, and open source intelligence (OSINT). It also addresses SSL configurations and interception proxies like BurpSuite Pro and Zed Attack Proxy. Learners will engage in content discovery, session testing, authentication bypasses, and utilize tools like fuff and Mutillidae to brute force unlinked files and directories. File-related vulnerabilities such as Local File Inclusion (LFI), Remote File Inclusion (RFI), unrestricted file uploads, and remote code execution are thoroughly examined. Injection attacks including SQL injection, command injection, directory traversal, insecure deserialization, and XML External Entity (XXE) exploitation form a core component of this curriculum. Moreover, learners will gain insights into advanced attack vectors like Cross-Site Request Forgery (CSRF), logic flaws, API attacks, AJAX security issues, and the use of Python for penetration testing. Finally, the course covers the effective use of industry-standard tools such as Nmap, WPScan, Metasploit, BurpSuite Pro Scanner, along with strategies for website auditing and post-assessment reporting.

Course Syllabus

Day 1 - Web Application Fundamentals
Short Break
15 mins
Short Break
15 mins
Recap and Q&A
15 mins
Lunch
1 hour
Short Break
15 mins
Short Break
15 mins
Short Break
15 mins
Recap and Q&A
15 mins
End of Day 1
Day 2 - Information Gathering Techniques
Short Break
15 mins
Short Break
15 mins
Recap and Q&A
15 mins
Lunch
1 hour
Short Break
15 mins
Short Break
15 mins
Short Break
15 mins
Recap and Q&A
15 mins
End of Day 2

Instructor

Loading...
Tarun Sukhani Founder & CTO Teaching

Tarun Sukhani is a distinguished professional trainer and consultant with over 25 years of comprehensive industry experience spanning multinational corporations across the US, Europe, Asia, South America, and the Middle East. His extensive background encompasses senior executive roles including CIO/CTO, director, and board member positions at renowned organizations such as Dell, AMD, and Experian, as well as regional conglomerates like Indra in Asia Pacific. This diverse corporate experience provides him with unique insights into enterprise-level challenges and solutions across multiple business functions including HR, Finance, Operations, Sales, Risk Management, Engineering, and Accounting. As a highly sought-after trainer, Tarun specializes in an impressive array of cutting-edge technologies and methodologies. His expertise spans Agile/Scrum/SAFe frameworks, enterprise architecture (TOGAF/COBIT/ITIL), cybersecurity (CISSP/CEH/CISO), project management (PRINCE2/PMP), Big Data technologies (Hadoop/Spark), Data Science with Python and R, DevOps practices, Machine Learning/AI, cloud computing, blockchain technologies, and modern development frameworks. This comprehensive skill set enables him to deliver training across the entire technology spectrum, from foundational concepts to advanced implementations. His training delivery extends throughout the Asia Pacific region, including Malaysia, Indonesia, Philippines, Thailand, and Singapore, where he has successfully conducted workshops and training programs for both large enterprises and SMEs. Tarun's client portfolio includes industry leaders such as Dell, AMD, Western Digital, Singtel, CIMB, Digi, Tenaga Nasional, and Sime Darby, demonstrating his ability to work with diverse organizational cultures and technical requirements. Academically, Tarun holds exceptional credentials including an MSc in Information Systems and MBA in Finance and Operations Management from Loyola University Chicago, where he graduated summa cum laude with Beta Gamma Sigma and Alpha Sigma Nu honors. His educational foundation is further strengthened by Bachelor's degrees in Biology, Math, Computer Science, and Business Administration, plus advanced programs from MIT and Stanford in AI, Blockchain, and Entrepreneurship. His extensive certifications as an Agile/Scrum trainer, Java/.NET developer, Machine Learning specialist, and InfoSec expert validate his technical proficiency and commitment to continuous learning, making him an ideal trainer for organizations seeking comprehensive technology education and transformation guidance.'

53 Students
243 Courses
English, Malay, Spanish
25 Years

Minimum Qualification

graduate

Target Audience

entry level
engineers
mid level managers

Methodologies

lecture
slides
case studies
group discussion
q&A

Course Reviews

review avatar
Lesli W.
2 years ago
2 years ago

Best course material to develop expertise in using advanced tools such as BurpSuite Pro scanner and Metasploit.

review avatar
Jenifer I.
2 years ago
2 years ago

I like the course. It provided me with the immense knowledge.

review avatar
Wei Qi
2 years ago
2 years ago

Great course. I was able to gain knowledge on web application security and how to identify and prevent common vulnerabilities.

Instructor Reviews

Tarun Sukhani Founder & CTO
review avatar
Michael Wong Shen Kai
3 years ago
3 years ago

He was indeed very skilled, knowledgeable and passionate in the data science realm. I was impressed with his business know-how (how the world economy works and how all things can be explain with data, with/without bias) and technical skills in converting data into insights. I will not hesitate to recommend Tarun for any data science related training as I would like to attend more classes myself to learn from the best of the best.

review avatar
Anak Agung
3 years ago
3 years ago

I attended one of Tarun's Data Science course in Jakarta (CDSS). He was a professional trainer & very knowledgeable in Data Science. In his course, Tarun gave many practical examples & valuable information regarding how to conduct Data Science & it's related components (e.g. Software & Deployment Architecture). In addition to those lessons, he also gave very useful insights on building a career as a Data Scientist.

review avatar
Pei Cher Chai
3 years ago
3 years ago

Attended "Blockchain Training: An Overview for Business Professionals" conducted by Dr. Tarun. The reference materials are very comprehensive and an excellent means of conveying information. I was very impressed with how this technology works and adapted into business

review avatar
LJ Ong
3 years ago
3 years ago

He shared his professional insights on data science with a sense of humor that cleared up so many of my questions about the content and real-world applications. Information, tools, and resources given are very useful

review avatar
Aamer S
3 years ago
3 years ago

His knowledge of multiple subjects exceeds far greater than that of any IT or non-IT person I have met or interacted with in a long time. The breadth and depth of the subject matter he has acquired is exemplary.

review avatar
Jovyn Kim
3 years ago
3 years ago

Training with Tarun has been awesome. He’s super knowledgable, funny, empathetic and a great educator in general. As someone who didn’t come from a computer science background, his teachings didn’t make me feel stupid or impossible to eventually arrive at being a competent developer. I could understand him as he communicates well & has helped me see the big picture of the computer science field beyond the scope of syntaxes. If you similarly did not come from a CS background and hope to transition into the world of programming but struggle to learn on your own, understand all the foreign & abstract concepts and connect the dots, I think the right person to guide you on your journey would make a big difference. Having someone who’s deep in the field with many years of experience narrow and communicate the relevant areas to focus would also close a big gap from having to struggle and figure out a lot of things on your own. Being able to maintain your interest during your learning journey is important too, thus finding that someone is important. All in all, I would wholeheartedly recommend Tarun and the backend course I took.

review avatar
Srikanth K
3 years ago
3 years ago

Tarun is a results-driven & inspirational technology leader with a clear vision, direction, and broad-based technology expertise. He is passionate, intuitive, engaged, pragmatic, systematic, agile. His experiences span from small start-ups to complex, global companies, from being technical lead to technical strategist to being the leader of larger group of architecture and engineering teams. Much of his experiences are in the area of Java, Scala, Machine Learning, Neural Networks, Cloud Computing, Data Science and what not. I am truly amazed to experience his breadth & depth of technological expertise and pleasure to be part of his team.

review avatar
Zulfikri Y
3 years ago
3 years ago

Tarun is very passionate on the domains and gave numerous insights to support critical business decisions and develop data products to transform daily encounters and processes. He was a professional trainer & very knowledgeable in Data Science. His material is presented through a sequence of brief lectures, interactive demonstrations, great hands-on exercises, and discussions.

review avatar
Marti Sigi
5 years ago
5 years ago

We’ve been collaborated many times in doing courses for the accountants. He spoke to quiet number of event in our company with various topic regards to accountants need. The collaboration was very smooth and his session definitely made a huge impact on our success. Mr Tarun is a great Professional!

review avatar
Pravena K
3 years ago
3 years ago

Mr. Tarun is a driven, hardworking, and knowledgeable entrepreneur in his field." A broad-minded trainer who embraces change and inspires people to do better every day. Mr. Tarun sets a good example by being enthusiastic and dedicated, and he inspires and motivates others. I am delighted to be working for such personnel

FAQs

Why should you attend?

Web Penetration Testing is an essential skill set for security professionals seeking to identify and exploit vulnerabilities within web applications. This comprehensive course delves into the intricacies of various web technologies, equipping participants with a deep understanding of the HTTP protocol, encoding schemes, and state management mechanisms. Participants will explore the OWASP Top 10, CWE, and SANS 25 to comprehend the most critical web security risks. The course progresses by covering information gathering techniques using WHOIS, DNS reconnaissance, and open source intelligence (OSINT). It also addresses SSL configurations and interception proxies like BurpSuite Pro and Zed Attack Proxy. Learners will engage in content discovery, session testing, authentication bypasses, and utilize tools like fuff and Mutillidae to brute force unlinked files and directories. File-related vulnerabilities such as Local File Inclusion (LFI), Remote File Inclusion (RFI), unrestricted file uploads, and remote code execution are thoroughly examined. Injection attacks including SQL injection, command injection, directory traversal, insecure deserialization, and XML External Entity (XXE) exploitation form a core component of this curriculum. Moreover, learners will gain insights into advanced attack vectors like Cross-Site Request Forgery (CSRF), logic flaws, API attacks, AJAX security issues, and the use of Python for penetration testing. Finally, the course covers the effective use of industry-standard tools such as Nmap, WPScan, Metasploit, BurpSuite Pro Scanner, along with strategies for website auditing and post-assessment reporting.

What you'll learn

  • Develop proficiency in scripting for automation during penetration tests.
  • Execute sophisticated injection attacks such as SQLi/XXE.
  • Understand the basics of HTTP protocols and web application architectures.
  • Identify and exploit various file-related vulnerabilities including LFI/RFI.
  • Navigate complex authentication mechanisms and session management vulnerabilities.
  • Conduct effective information gathering using OSINT and other reconnaissance methods.
  • Implement CSRF mitigation strategies and understand logic flaw exploitation.
  • Utilize advanced penetration testing tools including Nmap, WPScan, Metasploit.

Course Syllabus

Day 1 - Web Application Fundamentals
Short Break
15 mins
Short Break
15 mins
Recap and Q&A
15 mins
Lunch
1 hour
Short Break
15 mins
Short Break
15 mins
Short Break
15 mins
Recap and Q&A
15 mins
End of Day 1
Day 2 - Information Gathering Techniques
Short Break
15 mins
Short Break
15 mins
Recap and Q&A
15 mins
Lunch
1 hour
Short Break
15 mins
Short Break
15 mins
Short Break
15 mins
Recap and Q&A
15 mins
End of Day 2

Course Reviews

review avatar
Lesli W.
2 years ago
2 years ago

Best course material to develop expertise in using advanced tools such as BurpSuite Pro scanner and Metasploit.

review avatar
Jenifer I.
2 years ago
2 years ago

I like the course. It provided me with the immense knowledge.

review avatar
Wei Qi
2 years ago
2 years ago

Great course. I was able to gain knowledge on web application security and how to identify and prevent common vulnerabilities.

Instructor Reviews

Tarun Sukhani Founder & CTO
review avatar
Michael Wong Shen Kai
3 years ago
3 years ago

He was indeed very skilled, knowledgeable and passionate in the data science realm. I was impressed with his business know-how (how the world economy works and how all things can be explain with data, with/without bias) and technical skills in converting data into insights. I will not hesitate to recommend Tarun for any data science related training as I would like to attend more classes myself to learn from the best of the best.

review avatar
Anak Agung
3 years ago
3 years ago

I attended one of Tarun's Data Science course in Jakarta (CDSS). He was a professional trainer & very knowledgeable in Data Science. In his course, Tarun gave many practical examples & valuable information regarding how to conduct Data Science & it's related components (e.g. Software & Deployment Architecture). In addition to those lessons, he also gave very useful insights on building a career as a Data Scientist.

review avatar
Pei Cher Chai
3 years ago
3 years ago

Attended "Blockchain Training: An Overview for Business Professionals" conducted by Dr. Tarun. The reference materials are very comprehensive and an excellent means of conveying information. I was very impressed with how this technology works and adapted into business

review avatar
LJ Ong
3 years ago
3 years ago

He shared his professional insights on data science with a sense of humor that cleared up so many of my questions about the content and real-world applications. Information, tools, and resources given are very useful

review avatar
Aamer S
3 years ago
3 years ago

His knowledge of multiple subjects exceeds far greater than that of any IT or non-IT person I have met or interacted with in a long time. The breadth and depth of the subject matter he has acquired is exemplary.

review avatar
Jovyn Kim
3 years ago
3 years ago

Training with Tarun has been awesome. He’s super knowledgable, funny, empathetic and a great educator in general. As someone who didn’t come from a computer science background, his teachings didn’t make me feel stupid or impossible to eventually arrive at being a competent developer. I could understand him as he communicates well & has helped me see the big picture of the computer science field beyond the scope of syntaxes. If you similarly did not come from a CS background and hope to transition into the world of programming but struggle to learn on your own, understand all the foreign & abstract concepts and connect the dots, I think the right person to guide you on your journey would make a big difference. Having someone who’s deep in the field with many years of experience narrow and communicate the relevant areas to focus would also close a big gap from having to struggle and figure out a lot of things on your own. Being able to maintain your interest during your learning journey is important too, thus finding that someone is important. All in all, I would wholeheartedly recommend Tarun and the backend course I took.

review avatar
Srikanth K
3 years ago
3 years ago

Tarun is a results-driven & inspirational technology leader with a clear vision, direction, and broad-based technology expertise. He is passionate, intuitive, engaged, pragmatic, systematic, agile. His experiences span from small start-ups to complex, global companies, from being technical lead to technical strategist to being the leader of larger group of architecture and engineering teams. Much of his experiences are in the area of Java, Scala, Machine Learning, Neural Networks, Cloud Computing, Data Science and what not. I am truly amazed to experience his breadth & depth of technological expertise and pleasure to be part of his team.

review avatar
Zulfikri Y
3 years ago
3 years ago

Tarun is very passionate on the domains and gave numerous insights to support critical business decisions and develop data products to transform daily encounters and processes. He was a professional trainer & very knowledgeable in Data Science. His material is presented through a sequence of brief lectures, interactive demonstrations, great hands-on exercises, and discussions.

review avatar
Marti Sigi
5 years ago
5 years ago

We’ve been collaborated many times in doing courses for the accountants. He spoke to quiet number of event in our company with various topic regards to accountants need. The collaboration was very smooth and his session definitely made a huge impact on our success. Mr Tarun is a great Professional!

review avatar
Pravena K
3 years ago
3 years ago

Mr. Tarun is a driven, hardworking, and knowledgeable entrepreneur in his field." A broad-minded trainer who embraces change and inspires people to do better every day. Mr. Tarun sets a good example by being enthusiastic and dedicated, and he inspires and motivates others. I am delighted to be working for such personnel

We price match

Public Pricing

MYR 3500

Corporate Pricing

Pax:

Training Fees: MYR 6500/day
Total Fees: MYR 13000 ++

Training Provider Pricing

Pax:

Training Fees: MYR 4800
Material Fees: MYR 400
Total Fees: MYR 5200

Features

2 days
14 modules
11 intakes
English

Subsidies

HRDC Claimable logo

Instructor

Loading...
Tarun Sukhani Founder & CTO Teaching

Tarun Sukhani is a distinguished professional trainer and consultant with over 25 years of comprehensive industry experience spanning multinational corporations across the US, Europe, Asia, South America, and the Middle East. His extensive background encompasses senior executive roles including CIO/CTO, director, and board member positions at renowned organizations such as Dell, AMD, and Experian, as well as regional conglomerates like Indra in Asia Pacific. This diverse corporate experience provides him with unique insights into enterprise-level challenges and solutions across multiple business functions including HR, Finance, Operations, Sales, Risk Management, Engineering, and Accounting. As a highly sought-after trainer, Tarun specializes in an impressive array of cutting-edge technologies and methodologies. His expertise spans Agile/Scrum/SAFe frameworks, enterprise architecture (TOGAF/COBIT/ITIL), cybersecurity (CISSP/CEH/CISO), project management (PRINCE2/PMP), Big Data technologies (Hadoop/Spark), Data Science with Python and R, DevOps practices, Machine Learning/AI, cloud computing, blockchain technologies, and modern development frameworks. This comprehensive skill set enables him to deliver training across the entire technology spectrum, from foundational concepts to advanced implementations. His training delivery extends throughout the Asia Pacific region, including Malaysia, Indonesia, Philippines, Thailand, and Singapore, where he has successfully conducted workshops and training programs for both large enterprises and SMEs. Tarun's client portfolio includes industry leaders such as Dell, AMD, Western Digital, Singtel, CIMB, Digi, Tenaga Nasional, and Sime Darby, demonstrating his ability to work with diverse organizational cultures and technical requirements. Academically, Tarun holds exceptional credentials including an MSc in Information Systems and MBA in Finance and Operations Management from Loyola University Chicago, where he graduated summa cum laude with Beta Gamma Sigma and Alpha Sigma Nu honors. His educational foundation is further strengthened by Bachelor's degrees in Biology, Math, Computer Science, and Business Administration, plus advanced programs from MIT and Stanford in AI, Blockchain, and Entrepreneurship. His extensive certifications as an Agile/Scrum trainer, Java/.NET developer, Machine Learning specialist, and InfoSec expert validate his technical proficiency and commitment to continuous learning, making him an ideal trainer for organizations seeking comprehensive technology education and transformation guidance.'

53 Students
243 Courses
English, Malay, Spanish
25 Years

Minimum Qualification

graduate

Target Audience

entry level
engineers
mid level managers

Methodologies

lecture
slides
case studies
group discussion
q&A

FAQs

Close menu