Module1:Introduction to Web application
Module2: Basics
Module3:HTTP Protocol
Module4: Web servers and clients
Module5: Server-side and Client-side security controls
Module6: Types of web application security testing
Module7: Burpsuite, OWASP ZAP
Module8: Injections
Module9: Cross-site Scripting
Module10: Authentication Testing
Module11:Authorization Testing
Module12:Session Management
Module13:Security Misconfiguration
Module14: Missing functional level access controls
Module15: SSL & Configuration testing
Module16: Session Management testing
Module17:Brute force web applications
Module18:Parameter Manipulation
Module19: Other Attacks
Module20:Web application Penetration Testing Tools
Module21:Samurai WTF
Module22:Firefox security Add-ons
Module23:VAPT Methodologies
Module24:Documentation & Reporting