New Web Application Penetration Testing Certification

Key Takeaways

today I'm excited to announce the Practical Junior web tester PJ WT exam and certification we host today live stream covering all of the details and answering your questions but if you missed it here is the overview and of course if you still have questions after watching this video you can always drop into our Discord server at discord.gg TCM or swing by one of our Tuesday or Wednesday live streams hope you enjoy the Practical Junior web test as you all know I'm pretty passionate about web application security um this kind of gives you like you know the 10,000 foot view um so it's $199 comes with training so it includes the uh practical bug Bounty training which is basically everything that you need to pass the exam is in that training course and uh you know you could supplement that with you know like a little bit of extra reading or maybe like the API course for example but you don't necessarily need to you should if you can go through the course uh and uh and you feel comfortable with the exercises then then you're ready to go really um and you get two days for the exam um which is you know uh I think pretty generous like you shouldn't feel super rushed or stressed but I feel like you know everybody's busy and um you know actually cing out to like even a day to do an exam it gives you the flexibility that maybe you know you're going to start Friday after work and then you got a bit of your weekend and then you know you still a bit of Sunday to um to rest and and have a little bit of recovery as well so um so all good and uh oops let me move on so who's it for um basically if you're interested in web application penetration testing maybe you're already like a network penetration tester and you you want to kind of like broaden your skill set for example um or if you you know if you want to follow the path of web application Security application security engineering um or you're like a you know maybe a devops um engineer and you want to learn a little bit more about how attacks are pulled off and how you can you know assess and design your systems a little bit better for example then I think this is a pretty good uh course for you um but yeah generally speaking also if you're interested in bug Bounty as well then you know this is a pretty uh pretty good certification and once again training kind of covers a lot of that as well and all of the um vulnerabilities in there are things that um I've seen in the past dur doing web application penetration testing uh I've seen on bug Bounty um I've seen lots of times not like all the time so you know there not going to be things that come up in every pentest but there'll be things like really key things that you need to check for because you will find them during your uh during your career or during like your your bug bouncy Adventures so so we try to keep the exam as realistic as possible and almost be like you should feel like you're on an engagement um and uh and if I if I come over to our our last slide um the exam's hosted for you so you know you get an IP address and then basically you have free reign to attack it um you can use any tools you want um outside of denial of service you can use beu Pro beu community you can use scanners you can use um FFF you can use W fuzz you can use auto recon if you want to um basically uh any tool that you want to use to to try and find vulnerabilities um you're you're welcome to use um but you will probably need to use a mixture of both um tools you like scanning but also manual testing as well so that's kind of one of my hints is don't rely too much on tools but don't neglect them as well and then you know if you can get the balance right you're going to be uh successful for sure there aren't any flags on this exam either so I didn't want it to feel like uh CTF I wanted to give everybody the experience of uh this is what a pent test feels like and from that you should then be feeling a little bit more confident going into like a job interview for example or a little bit more confident of uh that your skills have been valid Val ated um so we do outline uh like things to find and my general advice is you know stick to the things that are on the course make sure you're thorough and methodical um but there there aren't any Flags you're expected to um produce a reports and then and then we we grade you based on that on that report and the reason for that is that you when people are hiring you and and they look at your um certifications and hopefully you know um as the certification becomes more hiring managers will look at it and be like ah okay this person can't just you know pop a shell they can actually um find things they can report them they can um talk about remediation and they can produce a professional report as well so we're touching on quite a lot of a lot of soft skills and if you're like me you should enjoy the exam because you know it's way about pentesting what's what's not to love