Newcomer to the Web Application Penetesting world - advice on courses & certs

juancarl0s

Hello people, I'm new to this community. I am interested in learning about Web Application penetration testing.
I have a degree in mathematics but want to get into the pen-testing world, currently working on a company that runs a website on ASP.NET. I have struggled finding courses dedicated to this area, and when I find them I cannot seem to find any feedback on them. Any advice, comment or experience is helpful.

Thanks in advance !

cyberguypr

Do you have any background at all related IT or to web apps? A couple of options:

https://www.elearnsecurity.com/course/web_application_penetration_testing/

Web Application Penetration Testing Course | Ethical Hacking Training

juancarl0s

I have some experience with programming (Pascal, C and Java). I also have a basic understanding of web apps that I have mostly learned from my current job as a QA analyst (the company I work for has a site built on ASP.NET).

Thanks for the suggestion, I'm checking them out as I write this. I came across this one (doesn't cover as much ground as your suggestions) Javascript for Pentesters « SecurityTube Trainings , do you have any thoughts for this particular course?

NotHackingYou

Troy Hunt's Hack Yourself First and OWASP Top 10 are both great video series that will help you get started. Both are available on Pluralsight.