CSG Certification

CSWP — Web Pentesting Bundle

Structured modules and practice. Lessons release individually as the instructor publishes them. Topics include computer foundations / introduction to computer fundamentals, computer foundations / computer hardware: components and system architecture, computer foundations / physical connectivity: cables, connectors and ports.

CSG Certificationcsg-certificationcourse-bundle

Recorded courseIntermediate74 modules

Computer Foundations / Introduction to Computer Fundamentals
Computer Foundations / Computer Hardware: Components and System Architecture
Computer Foundations / Physical Connectivity: Cables, Connectors and Ports

Course Description

A structured CSG Cyber School course with an ordered syllabus.

Each lesson, resource and assignment stays locked until its own file is published. Enrollment does not unlock unpublished content.

Complete Syllabus

IPv4 Fundamentals: Explained and AppliedLocked · Awaiting publication

Practice Task: IP Fundamentals: Explained and AppliedLocked · Awaiting publication

IPv6 Fundamentals: Explained and AppliedLocked · Awaiting publication

Practice Task: IPv6 Fundamentals: Explained and AppliedLocked · Awaiting publication

Static vs Dynamic addressing: Explained and AppliedLocked · Awaiting publication

Practice Task: Static vs Dynamic Addressing: Explained and AppliedLocked · Awaiting publication

APIPA: Explained and AppliedLocked · Awaiting publication

Practice Task: APIPA: Explained and AppliedLocked · Awaiting publication

DHCP Concepts: Explained and AppliedLocked · Awaiting publication

Practice Task: DHCP Concepts: Explained and AppliedLocked · Awaiting publication

DNS Fundamentals: Explained and AppliedLocked · Awaiting publication

Practice Task: DNS Fundamentals: Explained and AppliedLocked · Awaiting publication

Email Security Overview: Explained and AppliedLocked · Awaiting publication

Practice Task: Email Security Overview: Explained and AppliedLocked · Awaiting publication

VLAN Basics: Explained and AppliedLocked · Awaiting publication

Practice Task: VLAN Basics: Explained and AppliedLocked · Awaiting publication

VPN Basics: Explained and AppliedLocked · Awaiting publication

Practice Task: VPN Basics: Explained and AppliedLocked · Awaiting publication

Internet Appliances: Explained and AppliedLocked · Awaiting publication

Practice Task: Internet Appliances: Explained and AppliedLocked · Awaiting publication

Legacy/Embedded systems: Explained and AppliedLocked · Awaiting publication

Practice Task: Legacy/Embedded Systems: Explained and AppliedLocked · Awaiting publication

Internet of Things (IoT) devices: Explained and AppliedLocked · Awaiting publication

Practice Task: IOT Devices: Explained and AppliedLocked · Awaiting publication

Skills Challenge: Gridcore CTFLocked · Awaiting publication

Routers and Routing Functions: Concepts and Practical UseLocked · Awaiting publication

Practice Task: Routers and Routing Functions: Concepts and Practical UseLocked · Awaiting publication

Switches and Switching Functions: Concepts and Practical UseLocked · Awaiting publication

Practice Task: Switches and Switching Functions: Concepts and Practical UseLocked · Awaiting publication

Firewalls and Their Role in Network Security: Explained and AppliedLocked · Awaiting publication

Practice Task: Firewalls and Their Role in Network Security: Explained and AppliedLocked · Awaiting publication

IDS and IPS Systems: Explained and AppliedLocked · Awaiting publication

Practice Task: IDS and IPS Systems: Explained and AppliedLocked · Awaiting publication

Load Balancers and Traffic Distribution: Explained and AppliedLocked · Awaiting publication

Proxy Servers and Their Functions: Explained and AppliedLocked · Awaiting publication

Practice Task: Proxy Servers and Their Functions: Explained and AppliedLocked · Awaiting publication

NAS and SAN Storage ArchitecturesLocked · Awaiting publication

Practice Task: NAS & SAN: Explained and AppliedLocked · Awaiting publication

Wireless Access Points (AP) and Controllers: Explained and AppliedLocked · Awaiting publication

Practice Task: Wireless Access Points (AP) and Controllers: Explained and AppliedLocked · Awaiting publication

Content Delivery Networks (CDN): Explained and AppliedLocked · Awaiting publication

Practice Task: Content Delivery Networks (CDN): Explained and AppliedLocked · Awaiting publication

Virtual Private Networks (VPN): Explained and AppliedLocked · Awaiting publication

Practice Task: Virtual Private Networks (VPN): Explained and AppliedLocked · Awaiting publication

Quality of Service (QoS) Concepts: Explained and AppliedLocked · Awaiting publication

Practice Task: Quality of Service (QoS) Concepts: Explained and AppliedLocked · Awaiting publication

Time to Live (TTL) Explained: Explained and AppliedLocked · Awaiting publication

Practice Task: Time to Live (TTL): Explained and AppliedLocked · Awaiting publication

Physical vs Virtual Appliances: Explained and AppliedLocked · Awaiting publication

Practice Task: Physical vs Virtual Appliances: Explained and AppliedLocked · Awaiting publication

Viewing Files: Explained and AppliedLocked · Awaiting publication

Practice Task: Viewing Files: Explained and AppliedLocked · Awaiting publication

Stream Editing with sed: Explained and AppliedLocked · Awaiting publication

Practice Task: Stream Editing with sed: Explained and AppliedLocked · Awaiting publication

Pattern Scanning with awk: Explained and AppliedLocked · Awaiting publication

Practice Task: Pattern Scanning with awk: Explained and AppliedLocked · Awaiting publication

Sorting and Deduplication: Explained and AppliedLocked · Awaiting publication

Practice Task: Sorting and Deduplication: Explained and AppliedLocked · Awaiting publication

Merging Files: Explained and AppliedLocked · Awaiting publication

Practice Task: Merging Files: Explained and AppliedLocked · Awaiting publication

Splitting Large Files with split: Explained and AppliedLocked · Awaiting publication

Practice Task: Splitting Large Files with split: Explained and AppliedLocked · Awaiting publication

Searching with grep: Explained and AppliedLocked · Awaiting publication

Practice Task: Searching with grep: Explained and AppliedLocked · Awaiting publication

Extracting Strings from Binaries: Explained and AppliedLocked · Awaiting publication

Practice Task: Extracting Strings from Binaries: Explained and AppliedLocked · Awaiting publication

Character Translation: Explained and AppliedLocked · Awaiting publication

Practice Task: Character Translation: Explained and AppliedLocked · Awaiting publication

Extracting Columns: Explained and AppliedLocked · Awaiting publication

Practice Task: Extracting Columns: Explained and AppliedLocked · Awaiting publication

Counting with wc & nl: Explained and AppliedLocked · Awaiting publication

Practice Task: Counting with wc & nl: Explained and AppliedLocked · Awaiting publication

Saving Output: Explained and AppliedLocked · Awaiting publication

Practice Task: Saving Output: Explained and AppliedLocked · Awaiting publication

Converting Tabs & Spaces: Explained and AppliedLocked · Awaiting publication

Practice Task: Converting Tabs & Spaces: Explained and AppliedLocked · Awaiting publication

Basic Regular Expressions: Explained and AppliedLocked · Awaiting publication

Practice Task: Basic Regular Expressions: Explained and AppliedLocked · Awaiting publication

Text Editors: Explained and AppliedLocked · Awaiting publication

Practice Task: Text Editors: Explained and AppliedLocked · Awaiting publication

Passive Reconnaissance: Foundations and First StepsLocked · Awaiting publication

Identifying our Target: Explained and AppliedLocked · Awaiting publication

Practice Task: Identifying our Target: Explained and AppliedLocked · Awaiting publication

Whois Records: Explained and AppliedLocked · Awaiting publication

Practice Task: Whois Records: Explained and AppliedLocked · Awaiting publication

Google Dorking: Explained and AppliedLocked · Awaiting publication

Practice Task: Google Dorking: Explained and AppliedLocked · Awaiting publication

Company OSINT: Explained and AppliedLocked · Awaiting publication

Practice Task: Company OSINT: Explained and AppliedLocked · Awaiting publication

Web Archives: Explained and AppliedLocked · Awaiting publication

Practice Task: Web Archives: Explained and AppliedLocked · Awaiting publication

Identifying Website Technologies: Explained and AppliedLocked · Awaiting publication

Practice Task: Identifying Website Technologies: Explained and AppliedLocked · Awaiting publication

Discovering Email addresses: Explained and AppliedLocked · Awaiting publication

Practice Task: Discovering Email addresses: Explained and AppliedLocked · Awaiting publication

Hunting breached credentials: Explained and AppliedLocked · Awaiting publication

Practice Task: Hunting breached credentials: Explained and AppliedLocked · Awaiting publication

Hunting for subdomains: Explained and AppliedLocked · Awaiting publication

Practice Task: Hunting for subdomains: Explained and AppliedLocked · Awaiting publication

Open Source code Reconnaissance: Explained and AppliedLocked · Awaiting publication

Practice Task: Open Source code reconnaissance: Explained and AppliedLocked · Awaiting publication

Security Headers and SSL/TLS testing: Explained and AppliedLocked · Awaiting publication

Practice Task: Security Headers and SSL/TLS testing: Explained and AppliedLocked · Awaiting publication

Banner grabbing and Firewall Detection: Explained and AppliedLocked · Awaiting publication

Practice Task: Banner grabbing and Firewall Detection: Explained and AppliedLocked · Awaiting publication

Finding IP address behind Cloudfare: Explained and AppliedLocked · Awaiting publication

Practice Task: Finding IP address behind Cloudfare: Explained and AppliedLocked · Awaiting publication

Shodan, Zoomeye and Censys: Explained and AppliedLocked · Awaiting publication

Practice Task: Shodan, Zoomeye and Censys: Explained and AppliedLocked · Awaiting publication

Enumeration with Carbon Dating: Explained and AppliedLocked · Awaiting publication

Practice Task: Enumeration with Carbon Dating: Explained and AppliedLocked · Awaiting publication

Android Apps Enumeration: Explained and AppliedLocked · Awaiting publication

Practice Task: Android Apps Enumeration: Explained and AppliedLocked · Awaiting publication

Utilizing Social Media: Explained and AppliedLocked · Awaiting publication

Practice Task: Utilizing Social Media: Explained and AppliedLocked · Awaiting publication

Information Gathering with Black Widow: Explained and AppliedLocked · Awaiting publication

Practice Task: Information Gathering with Black Widow: Explained and AppliedLocked · Awaiting publication

DNS recon using host, nslookup and dig: Explained and AppliedLocked · Awaiting publication

Practice Task: DNS recon using host, nslookup and dig: Explained and AppliedLocked · Awaiting publication

DNS Zone Transfer: Explained and AppliedLocked · Awaiting publication

Practice Task: DNS Zone Transfer: Explained and AppliedLocked · Awaiting publication

Historical DNS Records: Explained and AppliedLocked · Awaiting publication

Practice Task: Historical DNS Records: Explained and AppliedLocked · Awaiting publication

DNS Bruteforcing & Subdomain Enumeration: Explained and AppliedLocked · Awaiting publication

Practice Task: DNS Bruteforcing & Subdomain Enumeration: Explained and AppliedLocked · Awaiting publication

Finding and Enumerating ASN: Explained and AppliedLocked · Awaiting publication

Practice Task: Finding and Enumerating ASN: Explained and AppliedLocked · Awaiting publication

Finding Cloud resources: Explained and AppliedLocked · Awaiting publication

Practice Task: Finding Cloud resources: Explained and AppliedLocked · Awaiting publication

Filtering live hosts and domains: Explained and AppliedLocked · Awaiting publication

Practice Task: Filtering live hosts and domains: Explained and AppliedLocked · Awaiting publication

Finding Hidden parameters and endpoints: Explained and AppliedLocked · Awaiting publication

Practice Task: Finding Hidden parameters and endpoints: Explained and AppliedLocked · Awaiting publication

Automating the Reconnaissance: Explained and AppliedLocked · Awaiting publication

Practice Task: Automating the Reconnaissance: Explained and AppliedLocked · Awaiting publication

Knowledge Check: Passive ReconnaissanceLocked · Awaiting publication

Active Reconnaissance: Foundations and First StepsLocked · Awaiting publication

Metasploitable2 Installation and SetupLocked · Awaiting publication

Host discovery with netdiscover: Explained and AppliedLocked · Awaiting publication

Practice Task: Host discovery with netdiscover: Explained and AppliedLocked · Awaiting publication

Host Discovery with Nmap: Explained and AppliedLocked · Awaiting publication

Practice Task: Host Discovery with Nmap: Explained and AppliedLocked · Awaiting publication

Port scanning with nmap: Explained and AppliedLocked · Awaiting publication

Practice Task: Port scanning with nmap: Explained and AppliedLocked · Awaiting publication

Service Fingerprinting: Explained and AppliedLocked · Awaiting publication

Practice Task: Service Fingerprinting: Explained and AppliedLocked · Awaiting publication

OS Fingerprinting: Explained and AppliedLocked · Awaiting publication

Practice Task: OS Fingerprinting: Explained and AppliedLocked · Awaiting publication

Scanning beyond Firewall & IDS: Explained and AppliedLocked · Awaiting publication

Practice Task: Scanning beyond Firewall & IDS: Explained and AppliedLocked · Awaiting publication

Optimizing your scans: Explained and AppliedLocked · Awaiting publication

Practice Task: Optimizing your scans: Explained and AppliedLocked · Awaiting publication

Port Scanning in Windows: Explained and AppliedLocked · Awaiting publication

Practice Task: Port Scanning in Windows: Explained and AppliedLocked · Awaiting publication

Scanning with masscan: Explained and AppliedLocked · Awaiting publication

Practice Task: Scanning with masscan: Explained and AppliedLocked · Awaiting publication

Scanning with Rustscan: Explained and AppliedLocked · Awaiting publication

Practice Task: Scanning with Rustscan: Explained and AppliedLocked · Awaiting publication

Directory Bruteforcing: Explained and AppliedLocked · Awaiting publication

Practice Task: Directory Bruteforcing: Explained and AppliedLocked · Awaiting publication

Knowledge Check: Active ReconnaissanceLocked · Awaiting publication

Enumeration: Foundations and First StepsLocked · Awaiting publication

Practice Task: Preparing Enumeration LabLocked · Awaiting publication

FTP Enumeration: Explained and AppliedLocked · Awaiting publication

Practice Task: FTP Enumeration: Explained and AppliedLocked · Awaiting publication

Telnet Enumeration: Explained and AppliedLocked · Awaiting publication

Practice Task: Telnet Enumeration: Explained and AppliedLocked · Awaiting publication

SSH Enumeration: Explained and AppliedLocked · Awaiting publication

Practice Task: SSH Enumeration: Explained and AppliedLocked · Awaiting publication

NetBIOS Enumeration: Explained and AppliedLocked · Awaiting publication

Practice Task: NetBIOS Enumeration: Explained and AppliedLocked · Awaiting publication

SMB Enumeration: Explained and AppliedLocked · Awaiting publication

Practice Task: SMB Enumeration: Explained and AppliedLocked · Awaiting publication

SNMP Enumeration: Explained and AppliedLocked · Awaiting publication

Practice Task: SNMP Enumeration: Explained and AppliedLocked · Awaiting publication

LDAP Enumeration: Explained and AppliedLocked · Awaiting publication

Practice Task: LDAP Enumeration: Explained and AppliedLocked · Awaiting publication

NTP Enumeration: Explained and AppliedLocked · Awaiting publication

Practice Task: NTP Enumeration: Explained and AppliedLocked · Awaiting publication

NFS Enumeration: Explained and AppliedLocked · Awaiting publication

Practice Task: NFS Enumeration: Explained and AppliedLocked · Awaiting publication

SMTP Enumeration: Explained and AppliedLocked · Awaiting publication

Practice Task: SMTP Enumeration: Explained and AppliedLocked · Awaiting publication

IMAP Enumeration: Explained and AppliedLocked · Awaiting publication

Practice Task: IMAP Enumeration: Explained and AppliedLocked · Awaiting publication

POP Enumeration: Explained and AppliedLocked · Awaiting publication

Practice Task: POP Enumeration: Explained and AppliedLocked · Awaiting publication

MYSQL Enumeration: Explained and AppliedLocked · Awaiting publication

Practice Task: MYSQL Enumeration: Explained and AppliedLocked · Awaiting publication

TFTP Enumeration: Explained and AppliedLocked · Awaiting publication

Practice Task: TFTP Enumeration: Explained and AppliedLocked · Awaiting publication

IPSec Enumeration: Explained and AppliedLocked · Awaiting publication

Practice Task: IPSec Enumeration: Explained and AppliedLocked · Awaiting publication

Knowledge Check: EnumerationLocked · Awaiting publication

Metasploit Framework: Foundations and First StepsLocked · Awaiting publication

Metasploit Framework Overview: Explained and AppliedLocked · Awaiting publication

Practice Task: Metasploit Framework Overview: Explained and AppliedLocked · Awaiting publication

Preparing the working environmentLocked · Awaiting publication

Practice Task: Preparing the working environmentLocked · Awaiting publication

Auxiliary Modules: Explained and AppliedLocked · Awaiting publication

Practice Task: Auxiliary Modules: Explained and AppliedLocked · Awaiting publication

Exploit Modules: Explained and AppliedLocked · Awaiting publication

Practice Task: Exploit Modules: Explained and AppliedLocked · Awaiting publication

Post, Nops and Encoder Modules: Explained and AppliedLocked · Awaiting publication

Practice Task: Post, Nops and Encoder Modules: Explained and AppliedLocked · Awaiting publication

Meterpreter Payloads: Explained and AppliedLocked · Awaiting publication

Practice Task: Meterpreter Payloads: Explained and AppliedLocked · Awaiting publication

Creating payloads with msfvenom: Explained and AppliedLocked · Awaiting publication

Practice Task: Creating payloads with msfvenom: Explained and AppliedLocked · Awaiting publication

Hacking Windows XP with Metasploit: Explained and AppliedLocked · Awaiting publication

Practice Task: Hacking Windows XP with Metasploit: Explained and AppliedLocked · Awaiting publication

Hacking Windows 7 with Metasploit: Explained and AppliedLocked · Awaiting publication

Practice Task: Hacking Windows 7 with Metasploit: Explained and AppliedLocked · Awaiting publication

Hacking Windows 10 with Metasploit: Explained and AppliedLocked · Awaiting publication

Practice Task: Hacking Windows 10 with Metasploit: Explained and AppliedLocked · Awaiting publication

Hacking Windows remotely over WAN: Explained and AppliedLocked · Awaiting publication

Practice Task: Hacking Windows remotely over WAN: Explained and AppliedLocked · Awaiting publication

Adding a new exploit: Explained and AppliedLocked · Awaiting publication

Practice Task: Adding a new exploit: Explained and AppliedLocked · Awaiting publication

Resource Scripts: Explained and AppliedLocked · Awaiting publication

Practice Task: Resource Scripts: Explained and AppliedLocked · Awaiting publication

Knowledge Check: The Metasploit FrameworkLocked · Awaiting publication

Access Control Vulnerabilities: Explained and AppliedLocked · Awaiting publication

Practice Task: Access Control Vulnerabilities: Explained and AppliedLocked · Awaiting publication

Practice Lab 1: Unprotected admin functionalityLocked · Awaiting publication

Practice Task: Practice Lab 1: Unprotected admin functionalityLocked · Awaiting publication

Practice Lab 2: Unprotected admin functionality with unpredictable URLLocked · Awaiting publication

Practice Task: Practice Lab 2: Unprotected admin functionality with unpredictable URLLocked · Awaiting publication

Practice Lab 3: User role controlled by request parameterLocked · Awaiting publication

Practice Task: Practice Lab 3: User role controlled by request parameterLocked · Awaiting publication

Practice Lab 4: User role can be modified in user profileLocked · Awaiting publication

Practice Task: Practice Lab 4: User role can be modified in user profileLocked · Awaiting publication

Practice Lab 5: User ID controlled by request parameterLocked · Awaiting publication

Practice Task: Practice Lab 5: User ID controlled by request parameterLocked · Awaiting publication

Practice Lab 6: User ID controlled by request parameter, with unpredictable user IDsLocked · Awaiting publication

Practice Task: Practice Lab 6: User ID controlled by request parameter, with unpredictable user IDsLocked · Awaiting publication

Practice Lab 7: User ID controlled by request parameter with data leakage in redirectLocked · Awaiting publication

Practice Task: Practice Lab 7: User ID controlled by request parameter with data leakage in redirectLocked · Awaiting publication

Practice Lab 8: User ID controlled by request parameter with password disclosureLocked · Awaiting publication

Practice Task: Practice Lab 8: User ID controlled by request parameter with password disclosureLocked · Awaiting publication

Practice Lab 9: Insecure direct object referencesLocked · Awaiting publication

Practice Task: Practice Lab 9: Insecure direct object referencesLocked · Awaiting publication

CSRF (Cross-Site Request Forgery): Explained and AppliedLocked · Awaiting publication

Practice Task: CSRF (Cross-Site Request Forgery): Explained and AppliedLocked · Awaiting publication

Practice Lab 1: CSRF vulnerability with no defensesLocked · Awaiting publication

Practice Task: Practice Lab 1: CSRF vulnerability with no defensesLocked · Awaiting publication

Path Traversal: Explained and AppliedLocked · Awaiting publication

Practice Task: Path Traversal: Explained and AppliedLocked · Awaiting publication

Practice Lab 1: File path traversal, simple caseLocked · Awaiting publication

Practice Task: Practice Lab 1: File path traversal, simple caseLocked · Awaiting publication

SSRF (Server-Side Request Forgery): Explained and AppliedLocked · Awaiting publication

Practice Task: SSRF (Server-Side Request Forgery): Explained and AppliedLocked · Awaiting publication

Practice Lab 1: Basic SSRF against the local serverLocked · Awaiting publication

Practice Task: Practice Lab 1: Basic SSRF against the local serverLocked · Awaiting publication

Practice Lab 2: Basic SSRF against another back-end systemLocked · Awaiting publication

Practice Task: Practice Lab 2: Basic SSRF against another back-end systemLocked · Awaiting publication

CORS (Cross-Origin Resource Sharing): Explained and AppliedLocked · Awaiting publication

Practice Task: CORS (Cross-Origin Resource Sharing): Explained and AppliedLocked · Awaiting publication

Practice Lab 1: CORS vulnerability with basic origin reflectionLocked · Awaiting publication

Practice Task: Practice Lab 1: CORS vulnerability with basic origin reflectionLocked · Awaiting publication

Practice Lab 2: CORS vulnerability with trusted null originLocked · Awaiting publication

Practice Task: Practice Lab 2: CORS vulnerability with trusted null originLocked · Awaiting publication

HTTP Host Header Attacks: Explained and AppliedLocked · Awaiting publication

Practice Task: HTTP Host Header Attacks: Explained and AppliedLocked · Awaiting publication

Practice Lab 1: Basic password reset poisoningLocked · Awaiting publication

Practice Task: Practice Lab 1: Basic password reset poisoningLocked · Awaiting publication

Practice Lab 2: Host header authentication bypassLocked · Awaiting publication

Practice Task: Practice Lab 2: Host header authentication bypassLocked · Awaiting publication

Web Cache Deception: Explained and AppliedLocked · Awaiting publication

Practice Task: Web Cache Deception: Explained and AppliedLocked · Awaiting publication

Practice Lab 1: Exploiting path mapping for web cache deceptionLocked · Awaiting publication

Practice Task: Practice Lab 1: Exploiting path mapping for web cache deceptionLocked · Awaiting publication

Information Disclosure: Explained and AppliedLocked · Awaiting publication

Practice Task: Information Disclosure: Explained and AppliedLocked · Awaiting publication

Practice Lab 1: Information disclosure in error messagesLocked · Awaiting publication

Practice Task: Practice Lab 1: Information disclosure in error messagesLocked · Awaiting publication

Practice Lab 2: Information disclosure on debug pageLocked · Awaiting publication

Practice Task: Practice Lab 2: Information disclosure on debug pageLocked · Awaiting publication

Practice Lab 3: Source code disclosure via backup filesLocked · Awaiting publication

Practice Task: Practice Lab 3: Source code disclosure via backup filesLocked · Awaiting publication

Practice Lab 4: Authentication bypass via information disclosureLocked · Awaiting publication

Practice Task: Practice Lab 4: Authentication bypass via information disclosureLocked · Awaiting publication

Clickjacking: Explained and AppliedLocked · Awaiting publication

Practice Task: Clickjacking: Explained and AppliedLocked · Awaiting publication

Practice Lab 1: Basic clickjacking with CSRF token protectionLocked · Awaiting publication

Practice Task: Practice Lab 1: Basic clickjacking with CSRF token protectionLocked · Awaiting publication

Practice Lab 2: Clickjacking with form input data prefilled from a URL parameterLocked · Awaiting publication

Practice Task: Practice Lab 2: Clickjacking with form input data prefilled from a URL parameterLocked · Awaiting publication

Practice Lab 3: Clickjacking with a frame buster scriptLocked · Awaiting publication

Practice Task: Practice Lab 3: Clickjacking with a frame buster scriptLocked · Awaiting publication

SQL Injection: Explained and AppliedLocked · Awaiting publication

Practice Task: SQL Injection: Explained and AppliedLocked · Awaiting publication

Practice Lab 1: SQL injection vulnerability in WHERE clause allowing retrieval of hidden dataLocked · Awaiting publication

Practice Task: Practice Lab 1: SQL injection vulnerability in WHERE clause allowing retrieval of hidden dataLocked · Awaiting publication

Practice Lab 2: SQL injection vulnerability allowing login bypassLocked · Awaiting publication

Practice Task: Practice Lab 2: SQL injection vulnerability allowing login bypassLocked · Awaiting publication

XSS (Cross-Site Scripting): Explained and AppliedLocked · Awaiting publication

Practice Task: XSS (Cross-Site Scripting): Explained and AppliedLocked · Awaiting publication

Practice Lab 1: Reflected XSS into HTML context with nothing encodedLocked · Awaiting publication

Practice Task: Practice Lab 1: Reflected XSS into HTML context with nothing encodedLocked · Awaiting publication

Practice Lab 2: Stored XSS into HTML context with nothing encodedLocked · Awaiting publication

Practice Task: Practice Lab 2: Stored XSS into HTML context with nothing encodedLocked · Awaiting publication

Practice Lab 3: DOM XSS in document.write sink using source location.searchLocked · Awaiting publication

Practice Task: Practice Lab 3: DOM XSS in document.write sink using source location.searchLocked · Awaiting publication

Practice Lab 4: DOM XSS in innerHTML sink using source location.searchLocked · Awaiting publication

Practice Task: Practice Lab 4: DOM XSS in innerHTML sink using source location.searchLocked · Awaiting publication

Practice Lab 5: DOM XSS in jQuery anchor href attribute sink using location.search sourceLocked · Awaiting publication

Practice Task: Practice Lab 5: DOM XSS in jQuery anchor href attribute sink using location.search sourceLocked · Awaiting publication

Practice Lab 6: DOM XSS in jQuery selector sink using a hashchange eventLocked · Awaiting publication

Practice Task: Practice Lab 6: DOM XSS in jQuery selector sink using a hashchange eventLocked · Awaiting publication

Practice Lab 7: Reflected XSS into attribute with angle brackets HTML-encodedLocked · Awaiting publication

Practice Task: Practice Lab 7: Reflected XSS into attribute with angle brackets HTML-encodedLocked · Awaiting publication

Practice Lab 8: Stored XSS into anchor `href` attribute with double quotes HTML-encodedLocked · Awaiting publication

Practice Task: Practice Lab 8: Stored XSS into anchor `href` attribute with double quotes HTML-encodedLocked · Awaiting publication

Practice Lab 9: Reflected XSS into a JavaScript string with angle brackets HTML encodedLocked · Awaiting publication

Practice Task: Practice Lab 9: Reflected XSS into a JavaScript string with angle brackets HTML encodedLocked · Awaiting publication

XXE (XML External Entity): Explained and AppliedLocked · Awaiting publication

Practice Task: XXE (XML External Entity): Explained and AppliedLocked · Awaiting publication

Practice Lab 1: Exploiting XXE using external entities to retrieve filesLocked · Awaiting publication

Practice Task: Practice Lab 1: Exploiting XXE using external entities to retrieve filesLocked · Awaiting publication

Practice Lab 2: Exploiting XXE to perform SSRF attacksLocked · Awaiting publication

Practice Task: Practice Lab 2: Exploiting XXE to perform SSRF attacksLocked · Awaiting publication

OS Command Injection: Explained and AppliedLocked · Awaiting publication

Practice Task: OS Command Injection: Explained and AppliedLocked · Awaiting publication

Practice Lab 1: OS command injection, simple caseLocked · Awaiting publication

Practice Task: Practice Lab 1: OS command injection, simple caseLocked · Awaiting publication

NoSQL Injection: Explained and AppliedLocked · Awaiting publication

Practice Task: NoSQL Injection: Explained and AppliedLocked · Awaiting publication

Practice Lab 1: Detecting NoSQL injectionLocked · Awaiting publication

Practice Task: Practice Lab 1: Detecting NoSQL injectionLocked · Awaiting publication

Practice Lab 2: Exploiting NoSQL operator injection to bypass authenticationLocked · Awaiting publication

Practice Task: Practice Lab 2: Exploiting NoSQL operator injection to bypass authenticationLocked · Awaiting publication

What you get

CSCF — Computer Foundations
CISSNA — Networking Associate
CSL — Linux Administrator
CSP — CSG Cybersecurity Professional
CSWA — Web Application Hacking

Technical prerequisites

["A computer and an internet connection."]

Learning outcomes

Computer Foundations / Introduction to Computer Fundamentals
Computer Foundations / Computer Hardware: Components and System Architecture
Computer Foundations / Physical Connectivity: Cables, Connectors and Ports
Computer Foundations / Core Networking Concepts
Computer Foundations / Network Services and Segmented Environments
Computer Foundations / Wireless and Short-Range Networking: Concepts and Practice
Computer Foundations / Virtualization & Cloud Basics: Concepts and Practice
Computer Foundations / Working with Windows Systems
Computer Foundations / Command-Line Skills and Workflows
Computer Foundations / Operating Systems Overview & Installation Concepts: Concepts and Practice
Computer Foundations / Core Security Principles
Computer Foundations / Windows Security Configuration: Concepts and Practice
Computer Foundations / Working with operational Procedures: Script Identification and Remote Administration
Computer Foundations / Assembling and Validating a PC
Networking Associate / Course Orientation: Networking Associate
Networking Associate / Routers, Switches and Network Appliances
Networking Associate / Network Ports, Protocols, and Services: Concepts and Practice
Networking Associate / Transmission Media and Transceivers: Concepts and Practice
Networking Associate / Network Topologies, Architectures, and Types: Concepts and Practice
Networking Associate / IPv4 Addressing and Subnetting: Concepts and Practice
Networking Associate / IPv6 Addressing and Modern Network Concepts: Concepts and Practice
Networking Associate / Cloud Concepts and Connectivity: Concepts and Practice
Networking Associate / Routing Principles and Configuration
Networking Associate / Switching, VLANs and Configuration Practice
Networking Associate / Wireless Networking: Concepts and Practice
Networking Associate / Network Services: Concepts and Practice
Networking Associate / Network Security Fundamentals: Concepts and Practice
Networking Associate / Network Threats and Attack Patterns
Networking Associate / Network Configuration and Troubleshooting Lab
Linux Administrator / Linux Architecture and Kernel Foundations
Linux Administrator / From Power-On to Linux Services
Linux Administrator / Linux File System Hierarchy and Types: Concepts and Practice
Linux Administrator / Command Line Essentials: Concepts and Practice
Linux Administrator / Working with Files — Links, Streams, and Archiving: Concepts and Practice
Linux Administrator / Filtering, Searching and Transforming Text
Linux Administrator / Managing Linux Accounts and Groups
Linux Administrator / Linux Access Rights and Ownership
Linux Administrator / Processes, Jobs and Signals
Linux Administrator / Observability and Linux Performance
Linux Administrator / Automating Scheduled Tasks
Linux Administrator / Installing and Maintaining Software Packages
Linux Administrator / Devices, Drivers and Hardware Access
Linux Administrator / Partitions, Filesystems and Disk Operations
Linux Administrator / Reading and Managing System Logs
Linux Administrator / Networking in Linux: Concepts and Practice
Linux Administrator / File Sharing and Remote Transfers: Concepts and Practice
Linux Administrator / Hardening and Securing Linux Hosts
Cybersecurity Professional / Cybersecurity Principles: Concepts and Practice
Cybersecurity Professional / Reconnaissance and Target Discovery
Cybersecurity Professional / Active Discovery Techniques
Cybersecurity Professional / Service and Host Enumeration
Cybersecurity Professional / Identifying and Validating Vulnerabilities
Cybersecurity Professional / Exploitation Techniques and Controlled Shell Access
Cybersecurity Professional / Metasploit Workflows and Modules
Cybersecurity Professional / Client-Side Attack Surfaces
Cybersecurity Professional / Endpoint Defences and Evasion Concepts
Cybersecurity Professional / Integrated Penetration Testing Practice
Web Application Hacking / Course Orientation: Web Application Hacking
Web Application Hacking / Web Fundamentals Refresher: Concepts and Practice
Web Application Hacking / Web Testing Workflows with Burp Suite
Web Application Hacking / A01:2025 - Broken Access Control — Assessment and Practice
Web Application Hacking / A02:2025 - Security Misconfiguration — Assessment and Practice
Web Application Hacking / A03:2025 - Software Supply Chain Failures — Assessment and Practice
Web Application Hacking / A04:2025 - Cryptographic Failures — Assessment and Practice
Web Application Hacking / A05:2025 - Injection — Assessment and Practice
Web Application Hacking / A06:2025 - Insecure Design — Assessment and Practice
Web Application Hacking / A07:2025 - Authentication Failures — Assessment and Practice
Web Application Hacking / A08:2025 - Software or Data Integrity Failures — Assessment and Practice
Web Application Hacking / A09:2025 - Logging & Alerting Failures — Assessment and Practice
Web Application Hacking / File Upload Vulnerabilities: Concepts and Practice
Web Application Hacking / WebSockets & Real‑Time Channels: Concepts and Practice
Web Application Hacking / GraphQL API Vulnerabilities: Concepts and Practice
Web Application Hacking / API Testing: Concepts and Practice
Web Application Hacking / Assessing LLM-Enabled Web Applications

Prepare for your learning

Explore the basics and plan your practice before enrolling.

CSWP — Web Pentesting Bundle

Course Description

Complete Syllabus

What you get

Other courses

CSWA — Web Application Hacking

Related articles

WiFi Hacking & Wireless Security Guide

Frequently Asked Questions