CyberProtex
  • SOLUTIONS
    • Defense & Federal
    • Cloud & DevSecOps Engineering
    • Risk, Compliance & GRC
    • Rapid Prototyping
  • SERVICES
    • Managed Services >
      • Security Operations Center
      • Endpoint Protection
      • Operational Technology
      • Tabletop Exercises
      • Continuous Monitoring
    • Managed Security Services Provider (MSSP) >
      • Proactive Threat Monitoring
      • Managed Detection & Response (MDR)
      • Managed SIEM / Log Management
    • Security and Compliance >
      • Compliance and Governance >
        • Microsoft Purview
        • NIST 800-171 Assessments
        • CMMC Assessments
        • SPRS Score Checklist
      • Security Testing & Response >
        • Incident Response
        • Penetration Testing
        • Vulnerability Assessments
        • Phishing Simulations
  • SOFTWARE
    • Azure Migrations >
      • Azure Security and Federation
      • Identity and Access Management
    • Dynamics 365
    • SQL Management
    • DevSecOps
    • Application Security
    • Software Products >
      • Vulnerability Genius Software
      • eMASS Simulator Software
      • ICS - SCADA Simulations
      • CyberLMS Software
  • Training
    • Training Schedule
    • Certification >
      • Most Popular Certifications >
        • COMPTIA SECURITY+
        • CISM
        • ISC2-CISSP
        • CLOUD COMPUTING
        • AGILE AND SCRUM
        • ARTIFICAL INTELLIGENCE
        • DEVOPS
      • Cybersecurity Certifications >
        • ISC2-CC
        • ISC2-SSCP
        • ISC2-CGRC
        • ISC2-CSSLP
        • ISC2-ISSAP
        • ISC2-ISSEP
        • ISC2-ISSMP
        • ISACA-CISA
        • COMPTIA CASP+
        • COMPTIA CLOUD ESSENTIALS+
        • COMPTIA CLOUDNETX
        • COMPTIA DATA+
        • COMPTIA DATASYS+
        • COMPTIA DATAX
        • COMPTIA NETWORK+
        • COMPTIA PENTEST+
        • ISC2-CISSP
        • COMPTIA SECURITY+
        • COMPTIA SECURITYX
        • COMPTIA LINUX+
        • CISM
        • COMPTIA CYSA+
        • ISC2-CCSP
        • COMPTIA CLOUD+
        • COMPTIA A+
      • Microsoft Certifications >
        • SC-100
        • SC-200
        • AZ-500
        • SC-900
        • AZ-900
        • MS-900
        • PL-900
      • TOPICS >
        • CYBERSECURITY
        • CLOUD COMPUTING
        • ARTIFICAL INTELLIGENCE
        • VIRTUALIZATION
        • DEVOPS
        • AGILE AND SCRUM
      • BRANDS >
        • ISC2
        • COMPTIA
        • MICROSOFT
        • ISACA
        • AWS
        • CISCO
        • RED HAT
        • VMWARE
    • CMMC Coffee & Compliance >
      • Sensitivity Labels
      • Identity Is the New Perimeter
      • Access Control Without Breaking the Business
    • Tabletop Exercises
    • ICS - SCADA Training
    • YouTube Channel
    • Online Courses
    • BLOGS
  • About Us
    • Careers
    • Partners
    • Corporate-Offices >
      • Training Center
    • Community Outreach
    • Top Certs of 2025
  • Contact
Picture



​CyberShield 2021

​Practical Web Application Security Training
​



Practical Web Application Security Training
Picture
Cyber Shield is a National Guard exercise, in cooperation with USAR and USMCR, to conduct defensive cyber operations (DCO) training and assessment for DCO-Elements (DCOE), Cybersecurity detachments/cells, and Cyber Protection teams (CPTs) virtually during the week of July 12th thru July 16th 2021. Cyber Shield provides a collective training event for these teams and sets the conditions for evaluation against Army/Joint standards, including: Network Defense, Forensic Analysis, Reporting and Mitigation, Incident Response, etc.

CyberShield Information

Resources

Understanding web application security is key to successful web application penetration testing. We will explore web technology, including protocols, languages, clients, and server architectures. Students will learn how to collect open source intelligence (OSINT) to assist in exploiting web applications. The OWASP methodology provides a basis for delivering of high-quality assessments as well as learn tools for the pentester’s utility belt.

Videos to Watch

​Overview - Hacking Web Servers

​Intro to Hacking Web Servers

​Hacking Web Servers

Web Apps - ​Cloud As A Service

Dynamic Web Apps - ​Intro to SQL

​Footprinting and Recon

​Google Hacking Techniques

​Footprinting using Netcraft

​System Hacking Passwords

​Application Attacks- XSS, SQL, LDAP, and XML Command Injections

Types of Password Attacks

​Why use SFTP and not TFTP

​Parameter Tampering

​Hacking Consequences


CyberProtex, LLC - 2012-2026
850 Ben Graves Dr NW Suite 306, Huntsville, AL 35816
[email protected]
256-401-7072
Picture
Photo from The National Guard
  • SOLUTIONS
    • Defense & Federal
    • Cloud & DevSecOps Engineering
    • Risk, Compliance & GRC
    • Rapid Prototyping
  • SERVICES
    • Managed Services >
      • Security Operations Center
      • Endpoint Protection
      • Operational Technology
      • Tabletop Exercises
      • Continuous Monitoring
    • Managed Security Services Provider (MSSP) >
      • Proactive Threat Monitoring
      • Managed Detection & Response (MDR)
      • Managed SIEM / Log Management
    • Security and Compliance >
      • Compliance and Governance >
        • Microsoft Purview
        • NIST 800-171 Assessments
        • CMMC Assessments
        • SPRS Score Checklist
      • Security Testing & Response >
        • Incident Response
        • Penetration Testing
        • Vulnerability Assessments
        • Phishing Simulations
  • SOFTWARE
    • Azure Migrations >
      • Azure Security and Federation
      • Identity and Access Management
    • Dynamics 365
    • SQL Management
    • DevSecOps
    • Application Security
    • Software Products >
      • Vulnerability Genius Software
      • eMASS Simulator Software
      • ICS - SCADA Simulations
      • CyberLMS Software
  • Training
    • Training Schedule
    • Certification >
      • Most Popular Certifications >
        • COMPTIA SECURITY+
        • CISM
        • ISC2-CISSP
        • CLOUD COMPUTING
        • AGILE AND SCRUM
        • ARTIFICAL INTELLIGENCE
        • DEVOPS
      • Cybersecurity Certifications >
        • ISC2-CC
        • ISC2-SSCP
        • ISC2-CGRC
        • ISC2-CSSLP
        • ISC2-ISSAP
        • ISC2-ISSEP
        • ISC2-ISSMP
        • ISACA-CISA
        • COMPTIA CASP+
        • COMPTIA CLOUD ESSENTIALS+
        • COMPTIA CLOUDNETX
        • COMPTIA DATA+
        • COMPTIA DATASYS+
        • COMPTIA DATAX
        • COMPTIA NETWORK+
        • COMPTIA PENTEST+
        • ISC2-CISSP
        • COMPTIA SECURITY+
        • COMPTIA SECURITYX
        • COMPTIA LINUX+
        • CISM
        • COMPTIA CYSA+
        • ISC2-CCSP
        • COMPTIA CLOUD+
        • COMPTIA A+
      • Microsoft Certifications >
        • SC-100
        • SC-200
        • AZ-500
        • SC-900
        • AZ-900
        • MS-900
        • PL-900
      • TOPICS >
        • CYBERSECURITY
        • CLOUD COMPUTING
        • ARTIFICAL INTELLIGENCE
        • VIRTUALIZATION
        • DEVOPS
        • AGILE AND SCRUM
      • BRANDS >
        • ISC2
        • COMPTIA
        • MICROSOFT
        • ISACA
        • AWS
        • CISCO
        • RED HAT
        • VMWARE
    • CMMC Coffee & Compliance >
      • Sensitivity Labels
      • Identity Is the New Perimeter
      • Access Control Without Breaking the Business
    • Tabletop Exercises
    • ICS - SCADA Training
    • YouTube Channel
    • Online Courses
    • BLOGS
  • About Us
    • Careers
    • Partners
    • Corporate-Offices >
      • Training Center
    • Community Outreach
    • Top Certs of 2025
  • Contact