The course teaches mobile and web application security concepts, including the techniques on how to attack and how to respond with an appropriate countermeasure implementation. Our course has been developed around professional penetration testing and security awareness in the business and IT fields. To make sure that all participants gain the necessary security knowledge, our classes have an intensive hands-on format. Every topic is supported with virtual labs instructions and code examples. Knowledge and concepts of penetration testing are universal in all programing languages nevertheless exercises and code examples require Microsoft .Net programing skills and android development basics.


For corporate groups, we can organize this training as an on-site private group.
HAVELSAN
ASELSAN
PepsiCo Türkiye
JTI TÜTÜN ÜRÜNLERİ SANAYİ A.Ş.
ING Bank
DHL
MASTERCARD
Huawei
TotalEnergies
Mercedes-Benz Türk A.Ş.
Goodyear
FORD OTOMOTIV SANAYI A.S.
3M COMPANY
Schneider Electric
Central Bank of Azerbaijan
BP Petrolleri
Procter & Gamble (P&G)
Qatar Foundation
Bank Of China
GlaxoSmithKline (GSK)
MORGAN STANLEY & CO Inc
Novo Nordisk
DEUTSCHE BANK
Azerbaycan Cumhuriyeti Emek ve Ahalinin Sosyal Güvenliği Bakanlığı
ACCENTURE

Prerequisites

Microsoft .Net programing skills and android development basics

Who Should Attend

Developers, web developers, mobile solution developers, solution architects, security professionals with strong programing skills and other people responsible for implementing security of development process or application security.

What You Will Learn

  • Recognise the security risks that can be found in modern applications
  • Perform pen tests on web application and web API’s
  • Understand Security concepts in relation to Mobile Android Applications
  • Test the end to end mobile and web application solution

Training Outline

Module 1: OWASP Top 10 Application Security Risks

  • Injection
  • Broken Authentication
  • Sensitive Data Exposure
  • XXE
  • Broken Access Control
  • Security Misconfiguration
  • Cross-Site Scripting
  • Insecure Deserialization
  • Components with Known Vulnerabilities
  • Insufficient Logging & Monitoring

Module 2: Analysis of Web Application Security

In this module, you will learn how to perform series of web applications and web API penetration tests. Additionally, you will learn the most effective ways of securing them.

  • Methodologies of Web Application testing
  • Black Box Analysis
  • White Box Analysis
  • Automating penetration tests with OWASP ZAP
  • Web Application Firewall: Traditional vs Anomaly detection modes

Module 3: Analysis of Android Application Security

This module focuses on mobile Android applications, its general design, security concepts and different approaches to penetration tests and security, especially independent from OS version.

  • System architecture
  • Android OS security features
  • Black and White box tests for mobile
  • Android storage solutions
  • Encryption in App and OS

Module 4: End to End solution testing

This module covers different methods of penetration testing of whole solutions regardless of technology used as development platform.

  • Methodologies, solutions and tools
  • Fuzzy testing for Mobile applications
  • Fuzzy testing for Web API
  • Performance testing

Module 5: Use cases and discussion

This module covers discussion about security solutions specific in different technologies. It also demonstrates practical and complete use case of penetration testing and solution in 'hands-on labs' environment.

Why Choose Us

Leading UK-based global training provider since 1995.

Experience Masterclass: Pentesting and Securing Mobile and Web Applications in United States of America through Bilginç IT Academy's live and interactive virtual classroom environment. Join a Public course as an individual delegate or arrange a dedicated Private / In-house online training program exclusively for your organization.

  • Delivery Method: Online Instructor-Led
  • Participation Model: Public / Private (In-house)
  • Live and Interactive Training: Connect with your instructor in real time and actively participate through discussions, Q&A sessions, practical exercises, and group activities.
  • Flexible Participation: Join the training from your home, office, or any location with a suitable internet connection.
  • Expert Trainer Network: Learn from experienced trainers with strong industry backgrounds and practical field expertise.
  • Over 30 Years of Training Expertise: Benefit from Bilginç IT Academy's professional training experience since 1995.
  • Worldwide Access: Join our live virtual classrooms from United States of America or anywhere else in the world, or arrange a dedicated online training program for your organization.

Experience Masterclass: Pentesting and Securing Mobile and Web Applications through face-to-face Classroom Based training in United States of America. Training can be delivered as a Public course open to individual delegates or as a dedicated Private / In-house class for your organization.

  • Delivery Method: Classroom Based
  • Participation Model: Public / Private (In-house)
  • Face-to-Face Learning: Interact directly with your instructor and fellow delegates in an engaging classroom environment.
  • Experienced Trainers: Learn from specialists with extensive industry experience and practical real-world knowledge.
  • Professional Training Environment: Attend training in comfortable, well-equipped classrooms designed to support effective learning.
  • Practical Learning: Depending on the course, reinforce your knowledge through hands-on exercises, scenarios, case studies, and instructor-led activities.

Arrange Masterclass: Pentesting and Securing Mobile and Web Applications in United States of America as a dedicated Onsite training program for your organization. Bilginç IT Academy trainers can deliver the training at your office or another location of your choice, with the program planned around your team's requirements and business objectives.

  • Delivery Method: Onsite
  • Participation Model: Private (In-house)
  • Training at Your Preferred Location: Organize the training at your company's office or another location selected by your organization.
  • Tailored Course Content: Adapt the training program to your projects, team structure, existing skill levels, and specific business requirements.
  • Team-Focused Learning: Develop your team around a shared knowledge base while strengthening internal collaboration and knowledge transfer.
  • Flexible Scheduling: Plan the training dates, location, and program according to your organization's operational requirements.
  • Worldwide Onsite Delivery: Arrange the training in United States of America or at another preferred location worldwide. Bilginç IT Academy trainers can travel to your selected location to deliver the dedicated training program.
Contact us for more detail about our trainings and for all other enquiries!