The Ethical Hacker Network - GWAPT certification study material required

Latest Additions

Who's Online

lovewadhwa

Newbie

Offline

Posts: 16

GWAPT certification study material required

« on: April 24, 2010, 10:54:25 AM »

Hi all

I have to go for GWAPT certification but as found on SANS website, the course modules cost is pretty high. Will request you all if anyone can help me providing the course modules.Any help in this regard is duly appreciated.


	Logged

lovewadhwa@gmail.com

ajohnson

Recruiters
Hero Member

Offline

Posts: 1056

aka dynamik

Re: GWAPT certification study material required

« Reply #1 on: April 24, 2010, 11:50:45 AM »

http://www.owasp.org/index.php/OWASP_Testing_Project and http://www.amazon.com/Web-Application-Hackers-Handbook-Discovering/dp/0470170778/ref=sr_1_2?ie=UTF8&s=books&qid=1272127661&sr=8-2 should get you in pretty good shape. I haven't taken this myself, so I'm not sure if that'll cover everything.

However, you can two practice exams if you challenge the exam, and those should provide additional insight into what else (if anything) you need to work on.

You'll obviously need to understand HTML, Javascript, etc. as well.


	Logged

WIP: GCFA | www.infosiege.net | @infosiege

The day you stop learning is the day you start becoming obsolete.

What90

Full Member

Offline

Posts: 120

Re: GWAPT certification study material required

« Reply #2 on: April 24, 2010, 08:26:56 PM »

Have a play with the Samurai Web Testing Framework as Kevin Johnson, the course author, was one of the people that designed it. Plus if you read the course description, you find some of the other tools used in the course and can find plenty of reading for them on the web.

If you have to do the training or take the exam, have you looked at the vLive option from SANS? They have recently had a number of discount codes for some of the other vLive courses.

Depending on your experience levels with web applications and attacking, the challenge path dynamik is suggesting is one way to go. However, I'd suggest you'd need to have been working in the web app pentest space for a couple of years before attempting that.