HomeCoursesBlogAbout
Account
Back to courses

CSG Certification

CSWA — Web Application Hacking

Structured modules and practice. Lessons release individually as the instructor publishes them. Topics include course orientation: web application hacking, web fundamentals refresher: concepts and practice, web testing workflows with burp suite.

CSG Certificationcsg-certification
Recorded courseIntermediate17 modules
  • Course Orientation: Web Application Hacking
  • Web Fundamentals Refresher: Concepts and Practice
  • Web Testing Workflows with Burp Suite
CSWA — Web Application Hacking cover

ENROLLMENT

₹2.00Enroll Now

Enroll through our LMS portal. Select Enroll Now to open the portal and complete your enrollment there.

Course Description

A structured CSG Cyber School course with an ordered syllabus.

Each lesson, resource and assignment stays locked until its own file is published. Enrollment does not unlock unpublished content.

Complete Syllabus

🔒Web Application Hacking: Foundations and First StepsLocked · Awaiting publication

🔒HTTP and HTTPS: Concepts and Practical UseLocked · Awaiting publication
🔒Practice Task: HTTP and HTTPS: Concepts and Practical UseLocked · Awaiting publication
🔒HTTP Methods, Headers & Status Codes: Explained and AppliedLocked · Awaiting publication
🔒Practice Task: HTTP Methods, Headers & Status Codes: Explained and AppliedLocked · Awaiting publication
🔒Cookies & Sessions: Explained and AppliedLocked · Awaiting publication
🔒Practice Task: Cookies & Sessions: Explained and AppliedLocked · Awaiting publication
🔒OWASP Top 10 2025: Explained and AppliedLocked · Awaiting publication
🔒Practice Task: OWASP Top 10 2025: Explained and AppliedLocked · Awaiting publication

🔒Preparing lab & BurpsuiteLocked · Awaiting publication
🔒Burpsuite Deep Dive: Explained and AppliedLocked · Awaiting publication

🔒Access Control Vulnerabilities: Explained and AppliedLocked · Awaiting publication
🔒Practice Task: Access Control Vulnerabilities: Explained and AppliedLocked · Awaiting publication
🔒Practice Lab 1: Unprotected admin functionalityLocked · Awaiting publication
🔒Practice Task: Practice Lab 1: Unprotected admin functionalityLocked · Awaiting publication
🔒Practice Lab 2: Unprotected admin functionality with unpredictable URLLocked · Awaiting publication
🔒Practice Task: Practice Lab 2: Unprotected admin functionality with unpredictable URLLocked · Awaiting publication
🔒Practice Lab 3: User role controlled by request parameterLocked · Awaiting publication
🔒Practice Task: Practice Lab 3: User role controlled by request parameterLocked · Awaiting publication
🔒Practice Lab 4: User role can be modified in user profileLocked · Awaiting publication
🔒Practice Task: Practice Lab 4: User role can be modified in user profileLocked · Awaiting publication
🔒Practice Lab 5: User ID controlled by request parameterLocked · Awaiting publication
🔒Practice Task: Practice Lab 5: User ID controlled by request parameterLocked · Awaiting publication
🔒Practice Lab 6: User ID controlled by request parameter, with unpredictable user IDsLocked · Awaiting publication
🔒Practice Task: Practice Lab 6: User ID controlled by request parameter, with unpredictable user IDsLocked · Awaiting publication
🔒Practice Lab 7: User ID controlled by request parameter with data leakage in redirectLocked · Awaiting publication
🔒Practice Task: Practice Lab 7: User ID controlled by request parameter with data leakage in redirectLocked · Awaiting publication
🔒Practice Lab 8: User ID controlled by request parameter with password disclosureLocked · Awaiting publication
🔒Practice Task: Practice Lab 8: User ID controlled by request parameter with password disclosureLocked · Awaiting publication
🔒Practice Lab 9: Insecure direct object referencesLocked · Awaiting publication
🔒Practice Task: Practice Lab 9: Insecure direct object referencesLocked · Awaiting publication
🔒CSRF (Cross-Site Request Forgery): Explained and AppliedLocked · Awaiting publication
🔒Practice Task: CSRF (Cross-Site Request Forgery): Explained and AppliedLocked · Awaiting publication
🔒Practice Lab 1: CSRF vulnerability with no defensesLocked · Awaiting publication
🔒Practice Task: Practice Lab 1: CSRF vulnerability with no defensesLocked · Awaiting publication
🔒Path Traversal: Explained and AppliedLocked · Awaiting publication
🔒Practice Task: Path Traversal: Explained and AppliedLocked · Awaiting publication
🔒Practice Lab 1: File path traversal, simple caseLocked · Awaiting publication
🔒Practice Task: Practice Lab 1: File path traversal, simple caseLocked · Awaiting publication
🔒SSRF (Server-Side Request Forgery): Explained and AppliedLocked · Awaiting publication
🔒Practice Task: SSRF (Server-Side Request Forgery): Explained and AppliedLocked · Awaiting publication
🔒Practice Lab 1: Basic SSRF against the local serverLocked · Awaiting publication
🔒Practice Task: Practice Lab 1: Basic SSRF against the local serverLocked · Awaiting publication
🔒Practice Lab 2: Basic SSRF against another back-end systemLocked · Awaiting publication
🔒Practice Task: Practice Lab 2: Basic SSRF against another back-end systemLocked · Awaiting publication

🔒CORS (Cross-Origin Resource Sharing): Explained and AppliedLocked · Awaiting publication
🔒Practice Task: CORS (Cross-Origin Resource Sharing): Explained and AppliedLocked · Awaiting publication
🔒Practice Lab 1: CORS vulnerability with basic origin reflectionLocked · Awaiting publication
🔒Practice Task: Practice Lab 1: CORS vulnerability with basic origin reflectionLocked · Awaiting publication
🔒Practice Lab 2: CORS vulnerability with trusted null originLocked · Awaiting publication
🔒Practice Task: Practice Lab 2: CORS vulnerability with trusted null originLocked · Awaiting publication
🔒HTTP Host Header Attacks: Explained and AppliedLocked · Awaiting publication
🔒Practice Task: HTTP Host Header Attacks: Explained and AppliedLocked · Awaiting publication
🔒Practice Lab 1: Basic password reset poisoningLocked · Awaiting publication
🔒Practice Task: Practice Lab 1: Basic password reset poisoningLocked · Awaiting publication
🔒Practice Lab 2: Host header authentication bypassLocked · Awaiting publication
🔒Practice Task: Practice Lab 2: Host header authentication bypassLocked · Awaiting publication
🔒Web Cache Deception: Explained and AppliedLocked · Awaiting publication
🔒Practice Task: Web Cache Deception: Explained and AppliedLocked · Awaiting publication
🔒Practice Lab 1: Exploiting path mapping for web cache deceptionLocked · Awaiting publication
🔒Practice Task: Practice Lab 1: Exploiting path mapping for web cache deceptionLocked · Awaiting publication
🔒Information Disclosure: Explained and AppliedLocked · Awaiting publication
🔒Practice Task: Information Disclosure: Explained and AppliedLocked · Awaiting publication
🔒Practice Lab 1: Information disclosure in error messagesLocked · Awaiting publication
🔒Practice Task: Practice Lab 1: Information disclosure in error messagesLocked · Awaiting publication
🔒Practice Lab 2: Information disclosure on debug pageLocked · Awaiting publication
🔒Practice Task: Practice Lab 2: Information disclosure on debug pageLocked · Awaiting publication
🔒Practice Lab 3: Source code disclosure via backup filesLocked · Awaiting publication
🔒Practice Task: Practice Lab 3: Source code disclosure via backup filesLocked · Awaiting publication
🔒Practice Lab 4: Authentication bypass via information disclosureLocked · Awaiting publication
🔒Practice Task: Practice Lab 4: Authentication bypass via information disclosureLocked · Awaiting publication
🔒Clickjacking: Explained and AppliedLocked · Awaiting publication
🔒Practice Task: Clickjacking: Explained and AppliedLocked · Awaiting publication
🔒Practice Lab 1: Basic clickjacking with CSRF token protectionLocked · Awaiting publication
🔒Practice Task: Practice Lab 1: Basic clickjacking with CSRF token protectionLocked · Awaiting publication
🔒Practice Lab 2: Clickjacking with form input data prefilled from a URL parameterLocked · Awaiting publication
🔒Practice Task: Practice Lab 2: Clickjacking with form input data prefilled from a URL parameterLocked · Awaiting publication
🔒Practice Lab 3: Clickjacking with a frame buster scriptLocked · Awaiting publication
🔒Practice Task: Practice Lab 3: Clickjacking with a frame buster scriptLocked · Awaiting publication

🔒Software Supply Chain Failures: Concepts and Practical UseLocked · Awaiting publication
🔒Practice Task: Software Supply Chain Failures: Concepts and Practical UseLocked · Awaiting publication
🔒Lab - Software Supply Chain Failures: Explained and AppliedLocked · Awaiting publication
🔒Practice Task: Lab - Software Supply Chain Failures: Explained and AppliedLocked · Awaiting publication

🔒Cryptographic Failures: Concepts and Practical UseLocked · Awaiting publication
🔒Practice Task: Cryptographic Failures: Concepts and Practical UseLocked · Awaiting publication
🔒Lab - Cryptographic Failures: Explained and AppliedLocked · Awaiting publication
🔒Practice Task: Lab - Cryptographic Failures: Explained and AppliedLocked · Awaiting publication

🔒SQL Injection: Explained and AppliedLocked · Awaiting publication
🔒Practice Task: SQL Injection: Explained and AppliedLocked · Awaiting publication
🔒Practice Lab 1: SQL injection vulnerability in WHERE clause allowing retrieval of hidden dataLocked · Awaiting publication
🔒Practice Task: Practice Lab 1: SQL injection vulnerability in WHERE clause allowing retrieval of hidden dataLocked · Awaiting publication
🔒Practice Lab 2: SQL injection vulnerability allowing login bypassLocked · Awaiting publication
🔒Practice Task: Practice Lab 2: SQL injection vulnerability allowing login bypassLocked · Awaiting publication
🔒XSS (Cross-Site Scripting): Explained and AppliedLocked · Awaiting publication
🔒Practice Task: XSS (Cross-Site Scripting): Explained and AppliedLocked · Awaiting publication
🔒Practice Lab 1: Reflected XSS into HTML context with nothing encodedLocked · Awaiting publication
🔒Practice Task: Practice Lab 1: Reflected XSS into HTML context with nothing encodedLocked · Awaiting publication
🔒Practice Lab 2: Stored XSS into HTML context with nothing encodedLocked · Awaiting publication
🔒Practice Task: Practice Lab 2: Stored XSS into HTML context with nothing encodedLocked · Awaiting publication
🔒Practice Lab 3: DOM XSS in document.write sink using source location.searchLocked · Awaiting publication
🔒Practice Task: Practice Lab 3: DOM XSS in document.write sink using source location.searchLocked · Awaiting publication
🔒Practice Lab 4: DOM XSS in innerHTML sink using source location.searchLocked · Awaiting publication
🔒Practice Task: Practice Lab 4: DOM XSS in innerHTML sink using source location.searchLocked · Awaiting publication
🔒Practice Lab 5: DOM XSS in jQuery anchor href attribute sink using location.search sourceLocked · Awaiting publication
🔒Practice Task: Practice Lab 5: DOM XSS in jQuery anchor href attribute sink using location.search sourceLocked · Awaiting publication
🔒Practice Lab 6: DOM XSS in jQuery selector sink using a hashchange eventLocked · Awaiting publication
🔒Practice Task: Practice Lab 6: DOM XSS in jQuery selector sink using a hashchange eventLocked · Awaiting publication
🔒Practice Lab 7: Reflected XSS into attribute with angle brackets HTML-encodedLocked · Awaiting publication
🔒Practice Task: Practice Lab 7: Reflected XSS into attribute with angle brackets HTML-encodedLocked · Awaiting publication
🔒Practice Lab 8: Stored XSS into anchor `href` attribute with double quotes HTML-encodedLocked · Awaiting publication
🔒Practice Task: Practice Lab 8: Stored XSS into anchor `href` attribute with double quotes HTML-encodedLocked · Awaiting publication
🔒Practice Lab 9: Reflected XSS into a JavaScript string with angle brackets HTML encodedLocked · Awaiting publication
🔒Practice Task: Practice Lab 9: Reflected XSS into a JavaScript string with angle brackets HTML encodedLocked · Awaiting publication
🔒XXE (XML External Entity): Explained and AppliedLocked · Awaiting publication
🔒Practice Task: XXE (XML External Entity): Explained and AppliedLocked · Awaiting publication
🔒Practice Lab 1: Exploiting XXE using external entities to retrieve filesLocked · Awaiting publication
🔒Practice Task: Practice Lab 1: Exploiting XXE using external entities to retrieve filesLocked · Awaiting publication
🔒Practice Lab 2: Exploiting XXE to perform SSRF attacksLocked · Awaiting publication
🔒Practice Task: Practice Lab 2: Exploiting XXE to perform SSRF attacksLocked · Awaiting publication
🔒OS Command Injection: Explained and AppliedLocked · Awaiting publication
🔒Practice Task: OS Command Injection: Explained and AppliedLocked · Awaiting publication
🔒Practice Lab 1: OS command injection, simple caseLocked · Awaiting publication
🔒Practice Task: Practice Lab 1: OS command injection, simple caseLocked · Awaiting publication
🔒NoSQL Injection: Explained and AppliedLocked · Awaiting publication
🔒Practice Task: NoSQL Injection: Explained and AppliedLocked · Awaiting publication
🔒Practice Lab 1: Detecting NoSQL injectionLocked · Awaiting publication
🔒Practice Task: Practice Lab 1: Detecting NoSQL injectionLocked · Awaiting publication
🔒Practice Lab 2: Exploiting NoSQL operator injection to bypass authenticationLocked · Awaiting publication
🔒Practice Task: Practice Lab 2: Exploiting NoSQL operator injection to bypass authenticationLocked · Awaiting publication

🔒Business Logic Vulnerabilities: Explained and AppliedLocked · Awaiting publication
🔒Practice Task: Business Logic Vulnerabilities: Explained and AppliedLocked · Awaiting publication
🔒Practice Lab 1: Excessive trust in client-side controlsLocked · Awaiting publication
🔒Practice Task: Practice Lab 1: Excessive trust in client-side controlsLocked · Awaiting publication
🔒Practice Lab 2: High-level logic vulnerabilityLocked · Awaiting publication
🔒Practice Task: Practice Lab 2: High-level logic vulnerabilityLocked · Awaiting publication
🔒Practice Lab 3: Inconsistent security controlsLocked · Awaiting publication
🔒Practice Task: Practice Lab 3: Inconsistent security controlsLocked · Awaiting publication
🔒Practice Lab 4: Flawed enforcement of business rulesLocked · Awaiting publication
🔒Practice Task: Practice Lab 4: Flawed enforcement of business rulesLocked · Awaiting publication
🔒Race Conditions: Explained and AppliedLocked · Awaiting publication
🔒Practice Task: Race Conditions: Explained and AppliedLocked · Awaiting publication
🔒Practice Lab 1: Limit overrun race conditionsLocked · Awaiting publication
🔒Practice Task: Practice Lab 1: Limit overrun race conditionsLocked · Awaiting publication

🔒Authentication: Explained and AppliedLocked · Awaiting publication
🔒Practice Task: Authentication: Explained and AppliedLocked · Awaiting publication
🔒Practice Lab 1: Username enumeration via different responsesLocked · Awaiting publication
🔒Practice Task: Practice Lab 1: Username enumeration via different responsesLocked · Awaiting publication
🔒Practice Lab 2: 2FA simple bypassLocked · Awaiting publication
🔒Practice Task: Practice Lab 2: 2FA simple bypassLocked · Awaiting publication
🔒Practice Lab 3: Password reset broken logicLocked · Awaiting publication
🔒Practice Task: Practice Lab 3: Password reset broken logicLocked · Awaiting publication
🔒OAuth Authentication: Explained and AppliedLocked · Awaiting publication
🔒Practice Task: OAuth Authentication: Explained and AppliedLocked · Awaiting publication
🔒Practice Lab 1: Authentication bypass via OAuth implicit flowLocked · Awaiting publication
🔒Practice Task: Practice Lab 1: Authentication bypass via OAuth implicit flowLocked · Awaiting publication
🔒JWT Attacks: Explained and AppliedLocked · Awaiting publication
🔒Practice Task: JWT Attacks: Explained and AppliedLocked · Awaiting publication
🔒Practice Lab 1: JWT authentication bypass via unverified signatureLocked · Awaiting publication
🔒Practice Task: Practice Lab 1: JWT authentication bypass via unverified signatureLocked · Awaiting publication
🔒Practice Lab 2: JWT authentication bypass via flawed signature verificationLocked · Awaiting publication
🔒Practice Task: Practice Lab 2: JWT authentication bypass via flawed signature verificationLocked · Awaiting publication

🔒Insecure Deserialization: Explained and AppliedLocked · Awaiting publication
🔒Practice Task: Insecure Deserialization: Explained and AppliedLocked · Awaiting publication
🔒Practice Lab 1: Modifying serialized objectsLocked · Awaiting publication
🔒Practice Task: Practice Lab 1: Modifying serialized objectsLocked · Awaiting publication

🔒Logging & Alerting Failures: Concepts and Practical UseLocked · Awaiting publication
🔒Practice Task: Logging & Alerting Failures: Concepts and Practical UseLocked · Awaiting publication
🔒Lab - Logging & Alerting Failures: Explained and AppliedLocked · Awaiting publication
🔒Practice Task: Lab - Logging & Alerting Failures: Explained and AppliedLocked · Awaiting publication

🔒File upload vulnerabilities: Concepts and Practical UseLocked · Awaiting publication
🔒Practice Task: File upload vulnerabilities: Concepts and Practical UseLocked · Awaiting publication
🔒Practice Lab 1: Remote code execution via web shell uploadLocked · Awaiting publication
🔒Practice Task: Practice Lab 1: Remote code execution via web shell uploadLocked · Awaiting publication
🔒Practice Lab 2: Web shell upload via Content-Type restriction bypassLocked · Awaiting publication
🔒Practice Task: Practice Lab 2: Web shell upload via Content-Type restriction bypassLocked · Awaiting publication

🔒Websockets Vulnerabilities: Concepts and Practical UseLocked · Awaiting publication
🔒Practice Task: Websockets Vulnerabilities: Concepts and Practical UseLocked · Awaiting publication
🔒Practice Lab 1: Manipulating WebSocket messages to exploit vulnerabilitiesLocked · Awaiting publication
🔒Practice Task: Practice Lab 1: Manipulating WebSocket messages to exploit vulnerabilitiesLocked · Awaiting publication

🔒GraphQL & its Vulnerabilities: Concepts and Practical UseLocked · Awaiting publication
🔒Practice Task: GraphQL & its Vulnerabilities: Concepts and Practical UseLocked · Awaiting publication
🔒Practice Lab 1: Accessing private GraphQL postsLocked · Awaiting publication
🔒Practice Task: Practice Lab 1: Accessing private GraphQL postsLocked · Awaiting publication

🔒API & API based attacks: Concepts and Practical UseLocked · Awaiting publication
🔒Practice Task: API & API based attacks: Concepts and Practical UseLocked · Awaiting publication
🔒Practice Lab 1: Exploiting an API endpoint using documentationLocked · Awaiting publication
🔒Practice Task: Practice Lab 1: Exploiting an API endpoint using documentationLocked · Awaiting publication

🔒Web LLM Attacks: Concepts and Practical UseLocked · Awaiting publication
🔒Practice Task: Web LLM Attacks: Concepts and Practical UseLocked · Awaiting publication
🔒Practice Lab 1: Exploiting LLM APIs with excessive agencyLocked · Awaiting publication
🔒Practice Task: Practice Lab 1: Exploiting LLM APIs with excessive agencyLocked · Awaiting publication

Technical prerequisites

["A computer and an internet connection."]

Learning outcomes

  • Course Orientation: Web Application Hacking
  • Web Fundamentals Refresher: Concepts and Practice
  • Web Testing Workflows with Burp Suite
  • A01:2025 - Broken Access Control — Assessment and Practice
  • A02:2025 - Security Misconfiguration — Assessment and Practice
  • A03:2025 - Software Supply Chain Failures — Assessment and Practice
  • A04:2025 - Cryptographic Failures — Assessment and Practice
  • A05:2025 - Injection — Assessment and Practice
  • A06:2025 - Insecure Design — Assessment and Practice
  • A07:2025 - Authentication Failures — Assessment and Practice
  • A08:2025 - Software or Data Integrity Failures — Assessment and Practice
  • A09:2025 - Logging & Alerting Failures — Assessment and Practice
  • File Upload Vulnerabilities: Concepts and Practice
  • WebSockets & Real‑Time Channels: Concepts and Practice
  • GraphQL API Vulnerabilities: Concepts and Practice
  • API Testing: Concepts and Practice
  • Assessing LLM-Enabled Web Applications

Prepare for your learning

Explore the basics and plan your practice before enrolling.

  • Cybersecurity roadmap in Hindi ↗
  • Build your practice lab ↗
  • Understand security reporting ↗
CSG Cyber School

Cybersecurity learning with hands-on practice.

HomeAll CoursesLearning GuidesAll BlogsAbout UsPrivacy PolicyTerms & ConditionsRefund & Cancellation PolicyDigital Delivery PolicyContact Us

© 2026 CSG Cyber School. All rights reserved.

Other courses

CSSCP — CSG Cyber School Certified Penetration Tester

Computer basics through penetration testing, web security and Active Directory. Content releases topic by topic.

View course →

CSWP — Web Pentesting Bundle

Structured modules and practice. Lessons release individually as the instructor publishes them.

View course →

CSEH — Ethical Hacking Bundle

Structured modules and practice. Lessons release individually as the instructor publishes them.

View course →

CSAD — Active Directory Hacking

Structured modules and practice. Lessons release individually as the instructor publishes them.

View course →

CSSCP — CSG Cyber School Certified Penetration Tester

Computer basics through penetration testing, web security and Active Directory. Content releases topic by topic.

View course →

CSWP — Web Pentesting Bundle

Structured modules and practice. Lessons release individually as the instructor publishes them.

View course →

CSEH — Ethical Hacking Bundle

Structured modules and practice. Lessons release individually as the instructor publishes them.

View course →

CSAD — Active Directory Hacking

Structured modules and practice. Lessons release individually as the instructor publishes them.

View course →

Related articles

WiFi Hacking & Wireless Security Guide

A practical Wi-Fi security guide covering wireless network risks, authentication, encryption and steps to protect your own network.

Read article →

WiFi Hacking & Wireless Security Guide

A practical Wi-Fi security guide covering wireless network risks, authentication, encryption and steps to protect your own network.

Read article →

YOUR QUESTIONS, ANSWERED

Frequently Asked Questions

Do I need an account before enrolling?+

Create your student account or sign in on the learning website. Email registration uses an OTP sent to your email. Google Authenticator is optional.

What should I check before buying a course?+

Check the published curriculum, prerequisites, lesson language, recorded or live format, schedule and price. Ask support about missing information before paying.

Where do I find my course after payment?+

After the payment is confirmed and your enrollment is verified, open Student Portal to find your purchased course. Your payment records are available under Receipts.

Who can view recorded lessons?+

Private course recordings require your signed-in student account and verified access to that course. A public course page does not grant recording access.

What refund window applies?+

The school policy provides a seven-day window for live courses and a 48-hour window for recorded courses. A refund is unavailable after more than 15 resources have been downloaded. Read the Refund and Cancellation Policy for the full applicable conditions.

How can I get help with enrollment or access?+

Use Contact Us or Request Callback before enrollment. Signed-in students can use the Support section for account, course, payment or technical questions.