OSWA is a practical web-assessment certification focused on finding and exploiting web vulnerabilities in realistic environments. For 2026 readiness, focus on API-first testing, auth logic flaws, and report clarity.
Official PageIntercept, modify, and automate web testing workflows.
burpsuiteDirectory, parameter and virtual host fuzzing.
sudo apt install -y ffufffuf -u https://target/FUZZ -w wordlist.txtPayloads/wordlists for discovery and exploitation.
sudo apt install -y seclistsls /usr/share/seclistsStructured notes for report-grade evidence capture.
Use for methodology + proof trackingTemplate-based vulnerability checks for breadth.
go install -v github.com/projectdiscovery/nuclei/v3/cmd/nuclei@latestnuclei -u https://targetRecursive web content discovery.
cargo install feroxbusterferoxbuster -u https://targetAutomated SQL injection testing and validation.
sudo apt install -y sqlmapsqlmap -u "https://target/item?id=1" --batch