OM-310
Advanced Web Application Security
In-depth web assessment and secure code review.
A professional course for people who assess complex applications. You review real codebases, analyse application design and learn to deliver findings that developers can fix quickly.
- 120 hours
- Study time
- 90 days
- Lab access
- 14
- Lab machines
- 4
- Formats
Outcomes
What you will be able to do
Learning outcomes you can point to in your work.
- Review application code systematically
- Analyse authentication, session and access control design
- Assess modern APIs and single-page applications
- Write remediation guidance developers trust
- Prepare for the OMPE exam
Syllabus
6 modules, 48 guided exercises
Module titles and topics are shown here. Full lessons and lab exercises open when you enrol.
Module 1: Code review methodology
- Reading unfamiliar code
- Tracing data flow
- Review checklists
8 exercises
Module 2: Authentication and sessions
- Identity design
- Session management
- Federated login
8 exercises
Module 3: Access control
- Authorisation models
- Multi-tenant design
- Review patterns
8 exercises
Module 4: APIs and modern front ends
- REST and GraphQL
- Client-side security
- Service-to-service trust
10 exercises
Module 5: Data handling
- Input handling
- Serialisation
- Templating
10 exercises
Module 6: Reporting for developers
- Root-cause findings
- Fix verification
- Secure design advice
4 exercises
Prerequisites
Before you begin
- OMCP or equivalent experience
- Reading knowledge of a modern web language
What is included
Everything in the course
- Video lessons
- Written course guide
- Code review labs
- Exam simulator
- 90 days of lab access
- 14 lab machines
The credential
Prepare for OMPE
This course is the preparation for the OffensiveMind Professional Expert exam. Finish the course, practise in the labs and sit the proctored practical when you are ready.
OMPE
OffensiveMind Professional Expert
Expert-level web application security assessment.
View credential