EC-Council
Web Application Hacking and Security
Practical web hacking with a defensive angle
Web Application Hacking and Security couples hands-on exploitation of common web flaws with attention to remediation, assessed through a practical exam.
Who it suits
Suits web testers and developers who want a practical exam focused on web vulnerabilities and who value learning to fix issues as well as exploit them.
Key differences
- The catalog description stresses secure remediation alongside attacks, giving it a defensive slant the OffSec credential does not emphasize.
- It organizes content around the common web risk categories, including APIs and business logic, rather than around one assessment engagement.
- Results are graded into tiers, so the credential indicates a level of performance and not simply pass or fail.
- It comes from EC-Council's program, whereas the OffSec option leads into that provider's own web and penetration testing track.
- Level
- Professional
- Assessment
- Practical
- Study time
- 100-220h
- Listed from
- $299
