Introducing Advanced Web Attacks and Exploitation
Advanced Web Attacks and Exploitation has 50% more content for 2020. Learn more: offensive-security.com/awae-oswe/
AWAE / WEB-300 is Offensive Security’s web application security course and the only official prep course for the OSWE certification. In July 2020, we updated it with new modules including:
XML external entity injection
Weak random token generation
DOM XSS
Server side template injection
Command injection via websockets (black box material)
Other updates include:
3 new private exercise machines with custom web apps
Updated control panel
This course teaches white box web app penetration testing methods and is not an entry-level course. If you work with a web application codebase or security infrastructure, explore the course now: offensive-security.com/awae-oswe/
Read more about the update: offensive-security.com/offsec/awae-2020-update/