Application Vulnerability Testing (CyberSuite)

"Application Vulnerability Testing" is a course, designed as part of the CyberSuite project, with funding via the DIGITAL Europe Programme for the European Union. The CyberSuite project tackles prevailing challenges in cybersecurity services by streamlining the design, configuration, deployment, and management of these services, specifically catering to SMEs lacking dedicated cybersecurity resources. 

About this course

This course provides a structured introduction to application vulnerability testing, covering both web and binary exploitation techniques. Designed for learners interested in ethical hacking and penetration testing, the course develops practical skills for identifying, analyzing, and mitigating security vulnerabilities in modern applications.

The course begins with foundational web technologies such as DNS, HTTP, URLs, and cookies, before exploring common web exploitation techniques including SQL Injection, Cross-Site Scripting (XSS), Cross-Site Request Forgery (CSRF), and command injection. Participants then transition into binary exploitation, examining ELF files, memory structures, assembly instructions, and debugging tools.

Learning outcomes 

Learners gain hands-on exposure to techniques such as buffer overflows, ret2win, ret2libc, and return-oriented programming (ROP), while using professional tools including Burp Suite and GDB for vulnerability analysis and testing.

By the end of the course, participants will be able to identify common web and binary vulnerabilities, understand exploitation workflows, apply structured vulnerability testing methodologies, and implement secure coding practices to reduce application security risks.