CSC305 - WEB APPLICATION PENETRATION TESTING

This course provides a comprehensive understanding of web application security, common vulnerabilities, and the methodologies used to assess and strengthen web systems. It covers every phase of a web penetration test — from initial information gathering and vulnerability scanning to exploitation and reporting. The course also addresses various classes of attacks including XSS, SQL injection, CSRF, session hijacking, and file inclusion. Students will gain hands-on knowledge using industry tools like Burp Suite, SQLMap, and other reconnaissance and exploitation frameworks. The course adheres to industry-standard methodologies such as PTES and OWASP Testing Guide, preparing students for real-world web application assessments and ethical hacking roles.