Fast Dive into eWPTv2

ngbonzini — Tue, 30 Jan 2024 18:23:51 +0000

Hello community! 👋 Today, i'm excited to share my experience diving into web application security through the eWPTv2 (Web Application Penetration Tester) certification. Let's dive into the journey and explore valuable resources.

¿Whats is eWPTv2?

According to INE ,"eWPTv2 is a hands-on, professional-level Red Team certification that simulates skills utilized during real-world engagements." The exam lasts 10 hours, featuring 50 questions. You don't have to submit a report; just answer the questions.

The course

It's a meticulously crafted curriculum covering a broad spectrum of web application security topics. From identifying vulnerabilities to conducting penetration tests, eWPTv2 ensures a comprehensive but not overly advanced knowledge. I highly recommend taking the course led by Alexis Ahmed before attempting the exam. This course provides the necessary tools not only to pass the certification but also to perform penetration testing at a professional level or to venture into the world of Bug Bounty.

The topics covered include:

An introduction to Web Application Security testing, covering everything from the HTTP protocol to OWASP Top Ten and its Open Web Security Testing Guide.
Web Enumeration and Information gathering.
Burpsuite and OWASP ZAP.
XSS
SQLinjection
Broken Authentication
Session Security
Cross-Site Request Forgery
Command Injection
Arbitrary File Upload Vulnerabilities
Path Traversal
LFI / RFI
Web Services
Security Testing CMS

Resources

If you prefer free resources or those from other platforms for additional learning and practice, here's a list of resources I used for extra preparation:

From Hack The Box

From Vulnhub

DC_3

Open Source

For Learning

Ready to fortify your skills and unlock new possibilities in web security? Dive into the world of eWPTv2 and let's secure the future together! 💻🔒

DEV Community: ngbonzini

Fast Dive into eWPTv2

¿Whats is eWPTv2?

The course

Resources