WEB-200: Foundational Web Application Assessments with Kali Linux is a foundational web application security course from OffSec that teaches learners how to identify, assess, and exploit common vulnerabilities in modern web applications.
The course takes a practical, black-box approach to web application assessment. Learners work with Kali Linux and commonly used security tools while developing skills in web reconnaissance, vulnerability discovery, exploitation, and data extraction.
Key areas include Cross-Site Scripting (XSS), Cross-Site Request Forgery (CSRF), CORS misconfigurations, SQL Injection, Directory Traversal, XXE, Server-Side Template Injection (SSTI), Server-Side Request Forgery (SSRF), Command Injection, and IDOR. Learners also develop practical experience with tools such as Burp Suite, Nmap, Gobuster, Wfuzz, and Hakrawler.
The course prepares learners for the OffSec Web Assessor (OSWA) certification, a practical certification that validates the ability to identify and exploit vulnerabilities in web applications.