Reconnaissance & Enumeration Lab
Passive and active recon on a target application
Kali Linux
Web Application Penetration Testing Diploma
Master the skills to identify, exploit, and report real-world web application vulnerabilities. Learn Networking, Web Programming, OWASP Top 10, SQL Injection, XSS, API Security, JWT, OAuth/SAML, WAF Evasion, SSRF, XXE, SSTI, and advanced exploitation through hands-on labs and real-world penetration testing.
160 taught hoursLive Online · On CampusNext cohort Nov 29Installments available
LiveOn Campus
15+
Years of training
ISO 9001
Certified academy
30+
Corporate clients
Choose how you want to learn
Each option has its own schedule and price.
On Campus
Nasr City
20,900 EGP
- Next group starts
- Next group: 29 November
- Group name
- Penetration testing Nasr 1
- Session time
- Sunday, Tuesday & Thursday · 08:00 – 11:00
- Real hands-on projects & portfolio
- 24/7 ticket support
- Accredited certificate
Secure payment
You’ll Be Ready To
What you will be able to do after completing Web Application Penetration Testing Diploma.
- Perform reconnaissance and enumeration on web targets
- Exploit OWASP Top 10 vulnerabilities manually and with tools
- Test REST/GraphQL APIs and JWT authentication
- Bypass WAFs and evade filters
- Write professional penetration test reports
160 taught hours5 modulesLive instructor-ledAccredited certificate
You May Pursue Roles Such As
The skills you build here prepare you for roles such as these.
Web Penetration Tester
Application Security Engineer
Ethical Hacker
Security Consultant
Red Team Analyst
Bug Bounty Hunter
Industries that hire these skills
- Banking & Fintech
- E-commerce
- Software Houses & Outsourcing
- Government
- Telecommunications
- Healthcare
- SaaS & Technology Companies
- Insurance
- Gaming
Roles listed describe the career paths this program prepares you for. They are not a guarantee of employment, and outcomes depend on your own background, portfolio and job search.
Projects that build real skills
13 portfolio projects you build on Web Application Penetration Testing Diploma, finishing with a capstone you can show an employer.
Authentication Bypass Lab
Exploit authentication and session weaknesses
Burp SuiteSQL Injection Lab (Manual)
Manually exploit SQL injection vulnerabilities
Burp SuiteSQL Injection Lab (Automated)
Automate SQL injection exploitation
SQLMapXSS Exploitation Lab
Exploit reflected, stored and DOM-based XSS
OWASP ZAPCSRF / IDOR Exploitation Lab
Exploit CSRF and insecure object references
Burp SuiteFile Inclusion (LFI/RFI) Lab
Exploit local and remote file inclusion flaws
Burp SuiteSSRF & XXE Lab
Exploit server-side request forgery and XXE
Burp SuiteSSTI Lab
Exploit server-side template injection
Burp SuiteAPI Security Testing
Test REST/GraphQL APIs and JWT authentication
PostmanJWT ToolsWAF Evasion Exercise
Bypass filters and web application firewalls
Burp Suite- Capstone
Project 1
Full real-world target assessment with professional reporting and remediation
- Capstone
Project 2
Full real-world target assessment with professional reporting and remediation
Technologies you’ll learn
The tools and disciplines this diploma covers, taken live from the academy’s own syllabus.
- Web Application Testing
- Burp Suite
- Vulnerability Scanning
- OWASP ZAP
- Penetration Testing Environment
- Kali Linux
- Testing Methodology
- OWASP Top 10
- SQL Injection Testing
- SQLMap
- API Security Testing
- Postman
- Token Security Testing
- JWT Tools
- Network Reconnaissance
- Nmap
What you’ll learn
5 modules · 27 topics · 160 hours
Build the networking foundation every penetration tester needs.
What you’ll learn
- OSI Model and Network Layers
- TCP/IP Stack & IP Addressing
- HTTP/HTTPS, DNS & Common Protocols
- Network Security & Traffic Analysis
- WAF evasion and REST/GraphQL API security testing
- Live hunting on real-world targets and professional pentest reporting
You’ll build
- A network traffic analysis exercise
Outcome
You'll understand how data moves across networks and where security weaknesses arise.
Understand how web applications are built before learning how to break them.
What you’ll learn
- HTML & CSS Fundamentals
- JavaScript Fundamentals & DOM
- Advanced JavaScript & Asynchronous Programming
- PHP Basics & Backend Fundamentals
- PHP Sessions, Cookies & State Management
- SQL & Database Fundamentals
You’ll build
- A small web app covering front-end and PHP backend basics
Outcome
You'll understand how web apps are built, which is essential for testing them effectively.
Learn the core methodology and vulnerabilities behind the eWPT certification.
What you’ll learn
- Introduction to Web Pentesting & Methodology
- Information Gathering & Reconnaissance
- Authentication Vulnerabilities & Bypass
- SQL Injection (Manual & Automated)
- Cross-Site Scripting (XSS)
- CSRF, IDOR & File Inclusion Vulnerabilities
You’ll build
- SQL injection and XSS exploitation labs
- A penetration testing methodology report
Outcome
You'll be able to identify and exploit the OWASP Top 10 vulnerabilities manually and with tools.
Go beyond the basics into advanced, modern exploitation techniques.
What you’ll learn
- WAF Evasion & Filter Bypassing
- XML External Entity (XXE) Injection
- Server-Side Request Forgery (SSRF)
- Insecure Deserialization & SSTI
- REST/GraphQL API Security
- JWT Security & OAuth/SAML Flaws
You’ll build
- An advanced exploitation lab covering SSRF, XXE and SSTI
- An API/JWT security test
Outcome
You'll be able to test modern APIs and bypass advanced defenses like WAFs.
Apply everything you've learned against real-world targets.
What you’ll learn
- Real-World Target Assessment
- Advanced Exploitation & Evasion
- Professional Reporting & Remediation
You’ll build
- A complete real-world penetration test with a professional report (Capstone)
Outcome
You'll graduate with 20 hours of live hunting experience and a capstone penetration test project.
Curriculum is updated regularly to match market demand.
Prerequisites & who can start
What you need to start
- Personal laptop
- Basic networking and web knowledge
- Basic computer literacy
- Ability to attend live sessions
- Interest in offensive security
Who is this program for?
Built for people like you
- Fresh Graduates who want to start a career in Cybersecurity and Penetration Testing.
- Cybersecurity Beginners who want to specialize in Web Application Security.
- IT & Network Professionals looking to transition into offensive security.
- Web Developers who want to understand how attackers identify and exploit application vulnerabilities.
- Aspiring Penetration Testers who want hands-on experience with real-world vulnerabilities.
- Cybersecurity Professionals looking to strengthen their web pentesting skills.
- Bug Bounty Enthusiasts who want to build a structured methodology for testing web applications.
- Freelancers & Security Consultants who want to offer web security assessment and penetration testing services.
Upcoming cohorts
Pick a start date and reserve your place.
29Nov
Starts Sun, 29 Nov 2026
in 33 DaysGroup Penetration testing Nasr 1
08:00 PM – 11:00 PM Nasr City
SundayThursdayTuesday
30Nov
Starts Mon, 30 Nov 2026
in 34 DaysGroup Penetration Testing Maadi 1
05:00 PM – 08:00 PM Maadi
MondayWednesday
Choose the Learning Experience That Fits You
Every option is live instructor-led, with the same projects, assessments and accredited certificate. Pick the format that fits your schedule.
| Feature | Online Live CohortNot scheduled right now — ask an advisor | On Campus Live Cohort |
|---|---|---|
| Start Date | Fixed | Fixed |
| Delivery | Live Online | Live On Campus |
| Schedule | Fixed Weekly Schedule | Fixed Weekly Schedule |
| Learning Hours | 160 | 160 |
| Mentor Support | Live Instructor | Live Instructor |
| Projects | Included | Included |
| Assessments | Included | Included |
| Certificate | Included | Included |
| Ideal For | Students who prefer a structured weekly schedule | Learners who enjoy face-to-face classroom interaction |
Swipe the table to compare all three.
Start dates, times and prices for this program are in the enrollment card above.
Everything you need to succeed
What is included with every AMIT program, whichever format you choose.
Live Mentor Sessions
Learn directly from industry experts through interactive workshops, coaching, and Q&A.
Portfolio Projects
Build real-world solutions that demonstrate your practical skills.
Milestone Assessments
Reinforce your knowledge and unlock the next stage of your learning journey.
Expert Support
Receive guidance from mentors whenever you need help.
Learning Community
Connect, collaborate, and learn alongside other learners.
Progress Tracking
Monitor your milestones and stay on track toward graduation.
Certificate
Earn your diploma after successfully completing all program requirements.
Career Readiness
Prepare your portfolio and strengthen your confidence to apply your new skills professionally.
Frequently asked questions
Personal laptop Basic networking and web knowledge Basic computer literacy Ability to attend live sessions Interest in offensive security
Web Application Penetration Testing Diploma is 160 taught hours across 5 modules, delivered live by an instructor. The exact calendar length depends on the cohort you pick — see the start dates above for each schedule.
Both. This programme runs on campus at Nasr City, Maadi. Every format is live instructor-led with the same projects, assessments and accredited certificate.
On Campus starts at 20,900 EGP. Installment plans are available — the options are shown at checkout.
Yes — an accredited certificate on successful completion of all program requirements. AMIT is ISO 9001:2015 certified and an ITIDA member, and its programs are accredited by the Egyptian Engineers Syndicate and the Applied Professionals Syndicate.
Recognized & accredited
Licensed by the Ministry of Communications & Information Technology
ISO 9001:2015
ITIDA
Cisco Networking Academy
Egyptian Engineers Syndicate
Applied Professionals Syndicate
On camera
Students and projects on film
Filmed interviews and project walk-throughs from this discipline. Each card shows the programme that student actually took.
Flexible Payment Options
Invest in your future with payment solutions designed to fit your budget.
Instant online payments
Card or mobile wallet — paid immediately, enrollment confirmed on the spot.
Buy now, pay later
- Bank installments
Split the fee over installments with a provider or your bank.
Offline payment options
InstaPay and bank transfer — instructions are shown during checkout.
- Secure payments
- Flexible installments
- Instant enrollment
Keep exploring
Related programs
- DiplomaCareer Programs
SOC Analyst & Cybersecurity Diploma
Starting from14,500 EGPprice depends on your learning option - DiplomaCareer Programs
QA & Test Automation Engineering Diploma
Starting from14,500 EGPprice depends on your learning option
Career consultation
Not Sure Which Program Is Right for You?
Get Free Career Guidance from an AMIT Advisor
Tell us about your goals, interests, and experience. Our education advisors will recommend the program that best fits your career ambitions and answer your questions — completely free.
- Free, no-pressure career guidance
- Advisors help hundreds of students every month
- Typically replies within one business day
Ready to build your future?
Join the students who have developed practical technology skills through live instructor-led training and real-world projects.
20,900 EGPPenetration testing Nasr 1