CREST - Certified Web Application Tester (CCTT APP)

Overview

The accelerated CREST Certified Web Application Tester (CCTT APP) certification is an assessment of the candidate’s ability to find vulnerabilities in bespoke web applications.  The examination uses specially designed applications running on a variety of web application platforms and now covers a wider scope than purely traditional web applications to include more recent advances in the field of web application technology and security. The candidate will be expected to demonstrate that they are able to find a range of security flaws and vulnerabilities, including proving the ability to exploit and leverage the flaws to ascertain the impact of the issues found.

In addition to traditional web application security, it is advised that candidates familiarise themselves with the following topics which are included in the practical examination and also may be included in the written components:

• Flash Application Testing
• .Net Thick Clients
• Java Applets
• Identification of functionality within client-side code that is accessible only to privileged users
• Vulnerabilities in increasingly prevalent application frameworks – e.g. Rails
• Identification of more recent SSL vulnerabilities – e.g. BEAST
• HTTP Header Fields relating to security features – e.g. HSTS
• Decompilation of client-side code – e.g. Flash, Java, .Net
• Web Server security misconfigurations – e.g. WebDAV

At the end of this course, you’ll achieve your CREST Certified Web Application Tester (CCTT APP) certification. Through Firebrand’s Lecture | Lab | Review methodology, you’ll get certified at twice the speed of the traditional training and get access to courseware, learn from certified instructors, and train in a distraction-free environment.

Audience

• The CREST Practitioner level examinations are the entry level professional exams and are aimed at individuals with around 2,500 hours (two years) of relevant and frequent experience.
• The CREST Registered level examinations are the next step and by passing this you are demonstrating your commitment as an information security tester.  Typically, candidates wishing to sit a Registered examination should have at least 6,000 hours (three years or more) of relevant and frequent experience.
• The CREST Certified level examinations are designed to set the benchmark for senior professionals. These are the certifications to which most aspire and the examinations are aimed at individuals with approximately 10,000 hours (five to six years) of relevant and frequent experience.The above timescales are recommended, not mandatory.