Current Status
Not Enrolled
Get Started
This ibsa course is currently closed
Batch Duration Two Weeks with 2 Weekend Sessions
Start DateTo Be Announced
Online Access to Session Recording100 Days
Self Study Content Access1 Year
Study MethodologyOnline Self Study, Live Sessions,
Practical Assignments
(To be explained during 1st session)
Key Requirements2 Hours Self Study Daily over the course
Personal Laptop with 8 GB RAM
Good Internet Connection at Home
After Succesful CompletionIBSA Certificate

In this module, you will learn about the 2 key topics
1) Authentication & Authorization related attacks &
2) SQL Injection
under the overall objective of web application security assessment. The syllabus includes –

  • Attacking the Login Page – Bruteforcing.
  • CAPTCHA (& Password Policy)
  • Authentication and Authorization
  • Two Factor Authentication
  • Parameter Manipulation & IDOR
  • Broken/Missing Function Level Access Control – Vertical and Horizontal
  • Introduction to DBMS
  • Basic SQL Commands 
  • SQL Injection
  • Fingerprint the Database
  • Inband SQL Injection – Bypass a Login page
  • Blind SQL
  • Union Operator
  • Injecting into SQL ( in different statements )
  • Bypassing Filters
  • Second order SQL injection
  • Preventing SQL injection
  • NOSQL injection (MongoDB)
  • LDAP injection basics

About the Instructors

25+ Years Business and Operations experience into IT, Cyber Security & Business Development.