Web Application Pentesting Project

This project is built on a real bounty-based CTF challenge hosted by Infosec. Each of its levels represents a vulnerable Web application and is based on the OWASP Top Ten list of the most common web application security risks, including SQL injection, Cross-Site scripting (XSS), broken authentication and more. You’ll need to apply all your knowledge about web application vulnerabilities and use many different tools and browser utilities to solve the challenges.

Get Started

Free training week — 1,400+ on-demand courses and hands-on labs

Start Learning

Get hands-on web application penetration testing experience

Estimated project time: 3 hours, 18 minutes

Web Application Pentesting Project - Getting Started
File
Web Application Pentesting Project - Getting Started

Web Application Pentesting Project - Getting Started

This file contains information needed to get started on completing the Web Application Pentesting CTF challenge.
Web Application Pentesting Project - Walkthrough
Video
Web Application Pentesting Project - Walkthrough

Web Application Pentesting Project - Walkthrough

This downloadable .zip file contains challenges for the Web Application Pentesting Project.

3 minutes
Web Application Pentesting Project - Solutions
File
Web Application Pentesting Project - Solutions

Web Application Pentesting Project - Solutions

Solutions to all Web Application Penetsting Project challenges.

Plans & pricing

Infosec Skills Personal

$299 / year

Buy Now 7-Day Free Trial
  • 190+ role-guided learning paths (e.g., Ethical Hacking, Threat Hunting)
  • 100s of hands-on labs in cloud-hosted cyber ranges
  • Custom certification practice exams (e.g., CISSP, Security+)
  • Skill assessments
  • Infosec peer community support

Infosec Skills Teams

$799 per license / year

Book a Meeting
  • Team administration and reporting
  • Dedicated client success manager
  • Single sign-on (SSO)
    Easily authenticate and manage your learners by connecting to any identity provider that supports the SAML 2.0 standard.
  • Integrations via API
    Retrieve training performance and engagement metrics and integrate learner data into your existing LMS or HRS.
  • 190+ role-guided learning paths and assessments (e.g., Incident Response)
  • 100s of hands-on labs in cloud-hosted cyber ranges
  • Create and assign custom learning paths
  • Custom certification practice exams (e.g., CISSP, CISA)
  • Optional upgrade: Guarantee team certification with live boot camps