Web Application Penetration Testing Notes

Welcome to my public repository for Web Application Penetration Testing. This repository contains the complete, structured curriculum, reference notes, and lab walkthroughs that I teach. It bridges the gap between deep protocol theory and real-world command-line execution.

🚀 How to Use This Repository

If you are here to learn, revise, or follow along with my course layout, please start by reading the master roadmap:

👉 Read the Roadmap.md 👈

The Roadmap.md file contains the exact step-by-step path and logical order of how these notes should be studied.

---

📂 Repository Architecture

Here is the blueprint of how the course materials and modules are structured:

.
├── 00_Introduction_&_Setup            # Protocol theory & environment setup
│   ├── Core_Web_Concepts.md          # HTTP, URL syntax, Architectures
│   ├── Tools_Installation.md         # FoxyProxy, httpx, ffuf, Proxy alternatives
│   └── Burp_Suite_Basics.md          # Proxy, Repeater, Intruder attack types
├── 01_Reconnaissance_&_Mapping        # Mapping the target attack surface
│   └── Active_vs_Passive_Recon.md    # OSINT, Subdomains, Vhosts, Active probing
├── 02_Server-Side_Vulnerabilities     # Exploiting backend logic, databases & parsers
│   ├── Broken_Authentication.md       # Auth bypass, Session flaws, JWT
│   ├── Command_Injection.md          # OS Command execution & filter bypasses
│   ├── SQL_Injection.md               # Extracting data via SQLi (In-band, Blind)
│   ├── File_Upload_Vulnerabilities.md # Web shells, extension bypasses, MIME tricks
│   ├── SSRF.md                        # Server-Side Request Forgery & Cloud Metadata
│   ├── XXE.md                         # XML External Entity injection & LFI
│   ├── SSTI.md                        # Template injection to RCE (Jinja2, Twig)
│   └── Insecure_Deserialization.md    # Object injection & gadget chains
├── 03_Client-Side_Vulnerabilities     # Targeting the browser & user state
│   ├── CSRF.md                       # Cross-Site Request Forgery
│   ├── XSS.md                        # Cross-Site Scripting (Reflected, Stored, DOM)
|   └── CORS.md                       # Cross-Origin Resource Sharing Misconfigurations
└── 04_Labs_&_Walkthroughs              # Hands-on challenges & solution guides
    ├── PortSwigger_Authentication_Flaws.md
    ├── PortSwigger_Information_Disclosure.md
    ├── PortSwigger_SQLi_Collection.md
    ├── PortSwigger_CSRF_Labs.md
    └── PortSwigger_XSS_Collection.md

🛠️ Target Audience

• Students attending my web security training sessions.

• Pentesters looking for highly structured, scannable reference sheets.

• Developers who want to understand how HTTP protocols and modern web architectures are actually broken and secured.

Feel free to star ⭐ the repository if you find these notes helpful during your assessments!