CREST Certified Web Application Tester (CCT APP)

The CREST Certified Web Application Tester (CCTT APP) certification is an assessment of the candidate’s ability to find vulnerabilities in bespoke web applications.

The examination uses specially designed applications running on a variety of web application platforms and now covers a wider scope than purely traditional web applications to include more recent advances in the field of web application technology and security.

The candidate will be expected to demonstrate that they are able to find a range of security flaws and vulnerabilities, including proving the ability to exploit and leverage the flaws to ascertain the impact of the issues found.

In addition to traditional web application security, it is advised that candidates familiarise themselves with the following topics which are included in the practical examination and also may be included in the written components:

• Flash Application Testing
• .Net Thick Clients
• Java Applets
• Identification of functionality within client-side code that is accessible only to privileged users
• Vulnerabilities in increasingly prevalent application frameworks – e.g. Rails
• Identification of more recent SSL vulnerabilities – e.g. BEAST
• HTTP Header Fields relating to security features – e.g. HSTS
• Decompilation of client-side code – e.g. Flash, Java, .Net
• Web Server security misconfigurations – e.g. WebDAV

At the end of this course, you’ll achieve your CREST Certified Web Application Tester (CCTT APP) certification, covered by our Certification Guarantee.

At Firebrand, we're proud to be a CREST Training Partner. Through our Lecture | Lab | Review method, you’ll access official courseware, learn from certified instructors, and train in a distraction-free environment.

Audience

The CREST Practitioner-level examinations are the entry-level professional exams and are aimed at individuals with around 2,500 hours (two years) of relevant and frequent experience.

The CREST Registered-level examinations are the next step and by passing this you are demonstrating your commitment as an information security tester. Typically, candidates wishing to sit a Registered examination should have at least 6,000 hours (three years or more) of relevant and frequent experience.

The CREST Certified-level examinations are designed to set the benchmark for senior professionals. These are the certifications to which most aspire and the examinations are aimed at individuals with approximately 10,000 hours (five to six years) of relevant and frequent experience.The above timescales are recommended, not mandatory.

• Module 1: Flash Application Testing
• Module 2: .Net Thick Clients
• Module 3: Java Applets
• Module 4: Identification of functionality within client-side code that is accessible only to privileged users
• Module 5: Vulnerabilities in increasingly prevalent application frameworks – e.g. Rails
• Module 6: Identification of more recent SSL vulnerabilities – e.g. BEAST
• Module 7: HTTP Header Fields relating to security features – e.g. HSTS
• Module 8: Decompilation of client-side code – e.g. Flash, Java, .Net
• Module 9: Web Server security misconfigurations – e.g. WebDAV

At the end of this course, you’ll sit the following exam at the Firebrand Training Centre, covered by our Certification Guarantee:

CREST Certified Web Application Tester (CCTT APP) Exam

• Duration: 3 hours
• Format: 150 multiple-choice questions
• Number of questions: 150
• Passing score: 60%

The CREST Practitioner-level examinations are the entry-level professional exams and are aimed at individuals with around 2,500 hours (two years) of relevant and frequent experience.

The CREST Registered-level examinations are the next step and by passing this you are demonstrating your commitment as an information security tester.  Typically, candidates wishing to sit a Registered examination should have at least 6,000 hours (three years or more) of relevant and frequent experience.

The CREST Certified level examinations are designed to set the benchmark for senior professionals. These are the certifications to which most aspire and the examinations are aimed at individuals with approximately 10,000 hours (five to six years) of relevant and frequent experience. The above timescales are recommended, not mandatory.

Your course includes:

• Accommodation *
• Meals, unlimited snacks, beverages, tea and coffee *
• On-site exams **
• Exam vouchers **
• Practice tests **
• Certification Guarantee ***
• Courseware
• Up to 12 hours of instructor-led training each day
• 24-hour lab access
• Digital courseware **

* For residential training only. Accommodation is included from the night before the course starts. This doesn't apply to online courses.
** Some exceptions apply. Please refer to the Exam Track or speak with our experts.
*** Pass the first time or train again for free as many times as it takes, unlimited for 1 year. Just pay for accommodation, exams, and incidental costs.

Six reasons to sit your course with Firebrand Training

• Three training options. Choose between residential classroom-based, live online, or city-centre courses
• All-inclusive course. A one-off fee covers all course materials, exams**, accommodation* and meals*. No hidden extras.
• Pass the first time or train again for free. This is our guarantee. We’re confident you’ll pass your course the first time. But if not, come back within a year and only pay for accommodation, exams and incidental costs
• You’ll learn more. Our expert instructors cover exclusive additional materials not taught through the official curriculum
• You’ll learn faster. Chances are, you’ll have a different learning style compared to those around you. We combine visual, auditory and tactile styles to deliver the material in a way that ensures you will learn faster and more easily
• You’ll be studying with the best. We’ve been named in the Training Industry’s “Top 20 IT Training Companies of the Year” every year since 2010. As well as winning many more awards, we’ve trained and certified over 145,000 professionals

*For residential training only. Doesn't apply to online courses
**Some exceptions apply. Please refer to the Exam Track or speak with our experts

Are you ready for the course? 

Get access to free practice tests here:  Free Practice Test