​The Advanced Web Service Attacks and Exploitation (AWAE) is an online training program that provides all the high-level skills required for professional penetration test against modern web services (API). This training includes the most advanced web service attacks, exploitation and pentesting techniques.

​

APIs can be great sources of bugs, so it's super important to know how to test them. We even cover wide part of recon knowledge. After then we will directly start testing for RCE, SQLi, XXE, stored XSS, etc.

​

After the technical vulnerabilities will be covered, we will dig deeper into the IDORs and try to access and change something that you are not supposed to view/change, we will then look for sensitive information leakage etc.

​