Planning to take GWAPT Challenge Exam

renzoncruz

So after passing my GCIH, I am planning to take GWAPT as my next SANS Course. I'm not sure if my employer are going to provide my training but for now, I am planning to purchase the exam using my savings. Is it worth a try? Any recommended books that I need to read before taking the GWAPT exam? I am new to Web App Pentesting so I think this is going to be a long study for this year 2017 before I'll book my exam.

Thanks in advance for the comments.

TechGuru80

When you say challenge, are you referring to taking the course or just the exam? The course has a ton of good material but for additional materials the Web Application Hacker's Handbook (https://www.amazon.com/Web-Application-Hackers-Handbook-Exploiting/dp/1118026470) has been referenced in several places...note the book was published in 2011 so there will be new tactics and techniques that exist outside of the book.

TechGromit

If your considering challenging the exam (which means taking the exam without taking the course or having access to the "official SANS books"), then I recommend just purchasing a practice test instead for $250. If you can do well on the practice exam, then you know your in the ballpark and it's worth the investment to pay for the exam.