Passed GWAPT

To be honest, that was an interesting test. The exam was not straight forward in the sense that it was is this or that, more about knowing how the technologies in web applications work. You really need to focus not getting to know the way web applications work. Knowing the tools and what is the result looks like after you run it is important. The course gets you started but there is a need for some work on your end. Learning the toolset and also how web applications work. Hope that helps anyone going for it.

Find more posts tagged with

Comments

LonerVamp

Did you take the SANS 542 course before this, or did you challenge it?

JoJoCal19

Congrats on the pass and thanks for the tips!!

supasecuritybro

LonerVamp wrote: »

Did you take the SANS 542 course before this, or did you challenge it?

I took the course as a work study. It definitely helped the process but I spent some time going over the OnDemand material and some labbing in order to prepare and I still wouldn't say I spent enough time learning the behind the scenes stuff on the technology. Needless to say, I am going to invest time now for a few weeks filling gaps.

chrisone

Congrats supa! Are the SANS exams just question based? any labs or interactive modules during the test?

averageguy72

Congrats!

LonerVamp

Congrats!

I ask, because I've been feeling weak in web testing attacks and have slated SEC 542 onto my training schedule early next year. Good stuff to know to keep context and scope in mind.

supasecuritybro

chrisone wrote: »

Congrats supa! Are the SANS exams just question based? any labs or interactive modules during the test?

Multiple choice, but it was well done. I liked it.

supasecuritybro

LonerVamp wrote: »

Congrats!

I ask, because I've been feeling weak in web testing attacks and have slated SEC 542 onto my training schedule early next year. Good stuff to know to keep context and scope in mind.

If I had to choose after getting an intro to web apps, I would do the 642 if you are wanting to learn about attacks more than anything. I think the 542, like 560 is a great starting point (even though advanced) for those topics. They do split up the courses in a good place in order to get the right audiences in each course.

josephandre

congratulations

MalwareMike

Which course did you like better, sec560 or sec542?

chrisone

MalwareMike wrote: »

Which course did you like better, sec560 or sec542?

he mentioned 542

MalwareMike

chrisone wrote: »

he mentioned 542

He said "I think the 542, like 560 is a great starting point (even though advanced) for those topics." but didn't specify if he liked one class more than the other...

[Deleted User]

Congrats on passing! Probably late to the party! Was there an area you wish you would have studied more from your books (SQL Injection, Session management ) etc. Any areas tested heavy (basic, forms authentication) etc.? Anything crazy with HTML injection or python requests library?

iota

Congrats

danGos

Congratulations!

SaSkiller

Thanks for the review, interested to see what you mean about understanding how the apps work.