Hacker News Reader

I am looking to get more into web app testing - Side note: I already have a NetSec degree and work in the field. Should I be pursuing the GWAPT: GIAC Web Application Penetration Tester? Should I just be working through the OWASP Top 10 manual and learn/practice the "Top 10s" first? Thanks !

View on HN

Sorry for the late reply, I missed it.

I suggest you start by having a look at the OWASP Top 10 and the OWASP Testing guide. Also read the Web Application Hackers Handbook 2nd Edition and learn how to use Burp Suite Pro.

I personally have not taken GWAPT so cannot comment on it, but the OSCP certification from Offensive Security is well regarded.

Good luck

Reply on news.ycombinator.com