Advanced Web Application Penetration Testing [Arabic] !

About this course

الكورس ده هيخلك مؤهل لشهادات advanced زي EWPTX لان فيه كل حاجه محتاجها عشان تدخل الامتحان وتاخد الشهارده ان شاء الله محتوى الكورس Injection Attacks SQL Injection (Classic – Blind – Error-Based – Time-Based)NoSQL InjectionCommand InjectionSSTIXPath & LDAP Injectionتحليل السبب + الاستغلال + التجاوز + الاكتشاف العملي Authentication & Authorization TestingLogin & Signup FlawsPassword Reset AttacksSession Management IssuesJWT Attacks (None, Weak Secret, Algorithm Confusion)OAuth MisconfigurationsBroken Access Control (IDOR / BFLA / BOLA) HTTP Attacks & Core Web WeaknessesHTTP Request SmugglingHost Header InjectionHTTP Parameter PollutionCache PoisoningVerb TamperingCORS Misconfigurations Modern Web AttacksBusiness Logic AttacksRace ConditionsWebhooks AbuseFile Upload Exploitation (Advanced Techniques)DOM-based Attacks SSRF Basic & Blind SSRFCloud Metadata ExploitationInternal Network PivotingSSRF to RCE Scenarios Insecure DeserializationJava / PHP / JSON DeserializationGadget Chains ConceptFrom Object Injection to RCEReal-world Exploitation Logic API SecurityREST API AttacksBroken Object Level AuthorizationMass AssignmentImproper Rate LimitingToken AbuseAPI Recon & Enumeration GraphQL SecurityGraphQL Introspection AbuseQuery Complexity AttacksAuthorization BypassGraphQL InjectionEnumeration WAF Evasion TechniquesPayload ObfuscationEncoding TricksHTTP Smuggling for BypassWAF FingerprintingRealistic Bypass Scenarios Tools & MethodologyBurp Suite (Advanced Usage)Custom Payload CraftingManual Testing Mindset