Web application penetration testing — SQL injection, XSS, SSRF, deserialization.
7 exam domains — click "Syllabus" tab for full breakdown