I CWEE What You Did There - How to Become a Certified Web Exploitation Expert
Source: YouTube · Hack The Box · published Jun 14, 2024 · 1:15:47
The Certified Web Expert (CWE) certification is Hack The Box's advanced web penetration testing certification designed as a successor to the Certified Bug Bounty Hunter (CBBH), teaching skills to identify both common and advanced vulnerabilities 2:18-2:58. Unlike CBBH which focused on specific vulnerabilities, CWE teaches the underlying concepts and mindset needed to discover even unknown vulnerabilities in the future 5:03-7:06.
Key Takeaways:
• CWE covers both black box and white box penetration testing, with half the modules dedicated to white box techniques 10:57-12:01
• The certification requires CBBH as a foundation or equivalent intermediate web penetration testing knowledge 7:54-8:37
• Students should have programming background knowledge to succeed in the course, though they don't need to be expert developers 17:42-18:23
• The exam is not proctored to create a realistic penetration testing experience where candidates can use any tools 27:22-28:13
Graduates of CWE will be equipped to perform advanced web penetration testing, identify difficult vulnerabilities, write exploits, and potentially discover zero-day vulnerabilities 29:24-31:13.
Sources:
- 2:18-2:58 Introduction to CWE certification and its relationship to CBBH
- 5:03-7:06 Focus on teaching vulnerability discovery concepts rather than just specific vulnerabilities
- 7:54-8:37 CWE as successor to CBBH and prerequisite knowledge requirements
- 10:57-12:01(https:/
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 1.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Penetration Testing. Commonly maps to: Security Assessment and Testing, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
[Music] [Applause] [Music] [Music] [Music] he [Music] he [Music] [Music] [Music] he [Music] [Applause] [Music] [Music] awesome hey everyone uh I was just about to type in we'll get started here in just a moment perfect hey everyone welcome to another awesome hack the Box AMA uh this is kind of a interesting spin on the interview series that we're doing uh this is with one of our amazing members of our content development team uh today we have the one the only zad who is uh this is his official title uh our training development director uh unofficially but also I guess kind of officially between the lines uh he is the head of Academy so all of the awesome content you find on there you can thank him for while him and his team so heck yeah let's go ahead and bring zad on and zad hey welcome t…