Back to Course

Web Pentest Pro

0% Complete
0/0 Steps
  1. WPP-S00 — Start Here

    WPP-S00-L01 — Bienvenida, alcance y ética
    3 Topics
    |
    1 Quiz
  2. WPP-S00-L02 — Entorno de trabajo del pentester web
    3 Topics
    |
    1 Quiz
  3. WPP-S00-L03 — Método de trabajo de extremo a extremo
    3 Topics
    |
    1 Quiz
  4. WPP-S00-L04 — Diagnóstico inicial
    3 Topics
    |
    1 Quiz
  5. WPP-S01 — Fundamentos Web y Superficie de Ataque
    WPP-S01-L01 — HTTP/HTTPS sin lagunas
    3 Topics
    |
    1 Quiz
  6. WPP-S01-L02 — Cómo está hecha una aplicación web moderna
    3 Topics
    |
    1 Quiz
  7. WPP-S01-L03 — Identidad, estado y sesión
    3 Topics
    |
    1 Quiz
  8. WPP-S01-L04 — Navegador, SOP y políticas del lado cliente
    3 Topics
    |
    1 Quiz
  9. WPP-S01-L05 — Section Review
    1 Topic
    |
    1 Quiz
  10. WPP-S02 — Reconocimiento y Mapping
    WPP-S02-L01 — Scope y reconnaissance pasivo
    3 Topics
    |
    1 Quiz
  11. WPP-S02-L02 — Reconocimiento activo con criterio
    3 Topics
    |
    1 Quiz
  12. WPP-S02-L03 — Attack surface mapping
    3 Topics
    |
    1 Quiz
  13. WPP-S02-L04 — Proxy workflow reproducible
    3 Topics
    |
    1 Quiz
  14. WPP-S02-L05 — Section Review
    1 Topic
    |
    1 Quiz
  15. WPP-S03 — Authentication, Session y Access Control
    WPP-S03-L01 — Modelos de autenticación y MFA
    3 Topics
    |
    1 Quiz
  16. WPP-S03-L02 — Session management flaws
    3 Topics
    |
    1 Quiz
  17. WPP-S03-L03 — Access control e IDOR/BOLA
    3 Topics
    |
    1 Quiz
  18. WPP-S03-L04 — Escalada de privilegios en aplicaciones web
    3 Topics
    |
    1 Quiz
  19. WPP-S03-L05 — Section Review
    1 Topic
    |
    1 Quiz
  20. WPP-S04 — Input Handling, Validation e Injection
    WPP-S04-L01 — Fuentes de entrada y trust boundaries
    3 Topics
    |
    1 Quiz
  21. WPP-S04-L02 — SQL Injection
    3 Topics
    |
    1 Quiz
  22. WPP-S04-L03 — Más allá de SQLi
    3 Topics
    |
    1 Quiz
  23. WPP-S04-L04 — Traversal, file handling y uploads
    3 Topics
    |
    1 Quiz
  24. WPP-S04-L05 — Section Review
    1 Topic
    |
    1 Quiz
  25. WPP-S05 — Client-Side Exploitation
    WPP-S05-L01 — XSS sin lagunas
    3 Topics
    |
    1 Quiz
  26. WPP-S05-L02 — CSRF, clickjacking y UI abuse
    3 Topics
    |
    1 Quiz
  27. WPP-S05-L03 — Client-side data exposure
    3 Topics
    |
    1 Quiz
  28. WPP-S05-L04 — Revisar JavaScript con mentalidad ofensiva
    3 Topics
    |
    1 Quiz
  29. WPP-S05-L05 — Section Review
    1 Topic
    |
    1 Quiz
  30. WPP-S06 — Server-Side Exploitation y APIs
    WPP-S06-L01 — SSRF y XXE
    3 Topics
    |
    1 Quiz
  31. WPP-S06-L02 — Deserialization, SSTI y paths a RCE
    3 Topics
    |
    1 Quiz
  32. WPP-S06-L03 — REST y GraphQL con criterio ofensivo
    3 Topics
    |
    1 Quiz
  33. WPP-S06-L04 — Rate limiting, abuse paths y automatización razonable
    3 Topics
    |
    1 Quiz
  34. WPP-S06-L05 — Section Review
    1 Topic
    |
    1 Quiz
  35. WPP-S07 — Business Logic, Chaining y Reporting
    WPP-S07-L01 — Business logic flaws
    3 Topics
    |
    1 Quiz
  36. WPP-S07-L02 — Race conditions y estado inconsistente
    3 Topics
    |
    1 Quiz
  37. WPP-S07-L03 — Encadenar hallazgos hasta impacto real
    3 Topics
    |
    1 Quiz
  38. WPP-S07-L04 — Reporting que gana credibilidad
    3 Topics
    |
    1 Quiz
  39. WPP-S07-L05 — Section Review
    1 Topic
    |
    1 Quiz
  40. WPP-S08 — Applied Labs, Final Proof y Completion
    WPP-S08-L01 — Lab: Recon y surface mapping
    4 Topics
  41. WPP-S08-L02 — Lab: Auth, session y access control
    4 Topics
  42. WPP-S08-L03 — Lab: Input, XSS e injection
    4 Topics
  43. WPP-S08-L04 — Lab: Server-side o API assessment
    4 Topics
  44. WPP-S08-L05 — Final Capstone
    4 Topics
  45. WPP-S08-L06 — Final Readiness y siguiente paso
    4 Topics
Quiz 1 of 39

WPP-S00-L01-Q01 — Orientation & Ethics Check

Argu 20 de septiembre de 2026