Web App 101 - Getting the Lay of the Land

Explore web application security fundamentals in this 44-minute conference talk from Derbycon 2018. Delve into essential topics such as scoping, testing, and effective enumeration techniques. Learn about methodology, forced browsing, and the use of Intruder for web application testing. Discover practical tips like renaming tabs, color coding, and handling nested parameters. Master the art of keeping state with macros to enhance your web application security skills.

Intro
Why this talk
scoping
testing
derp busting
effective enumeration
methodology
forced browsing
intruder
rename tabs
color coding
nested parameters
keeping state with macros