Dronacharya Batch-II

API Testing

A practical, security-focused API Testing course designed to help students understand how modern APIs work, identify security vulnerabilities, test authentication and authorization mechanisms, and assess APIs against common security risks. Students will gain hands-on experience with API security testing methodologies, vulnerability identification, and professional security reporting.

• Broken Object Property Level Authorization
• Broken Authentication
• Broken Object Level Authorization

5 days

The Ethical Hacking course is designed to provide students with practical cybersecurity skills used by professional penetration testers and security analysts. In this course, students will learn how hackers identify vulnerabilities in systems, networks, and web applications — and how organizations protect themselves against cyber threats. The training includes hands-on practical sessions, real-world case studies, security tools, and guided labs to help students understand both offensive and defensive cybersecurity concepts. Students will gain experience in footprinting, scanning, enumeration, vulnerability analysis, password cracking, social engineering, web application testing, wireless security testing, and basic malware concepts. The course is suitable for beginners, IT students, networking professionals, and anyone interested in building a career in cybersecurity. By the end of the course, students will be able to perform basic penetration testing, identify security weaknesses, and understand industry-standard ethical hacking methodologies.

Basic computer knowledge Understanding of internet and networking fundamentals No prior ethical hacking experience required A laptop or desktop with internet access Willingness to learn practical cybersecurity concepts

Certificate provided upon completion

The Mobile Application Penetration Testing course is designed for students, cybersecurity enthusiasts, developers, and IT professionals who want to learn how to test and secure Android and mobile applications against modern cyber threats. This course provides hands-on training on mobile application security concepts, penetration testing methodologies, reverse engineering, vulnerability assessment, and secure mobile application practices. Students will learn how attackers exploit insecure mobile applications and how organizations can protect their apps and user data. The course covers Android application structure, APK analysis, OWASP Mobile Top 10 vulnerabilities, insecure data storage, weak authentication, insecure communication, reverse engineering, code tampering, root detection bypass, API security testing, and mobile malware analysis. Students will work with industry-standard tools such as Burp Suite, MobSF, JADX, APKTool, Frida, ADB, Android Studio Emulator, and Postman to perform real-world mobile application security assessments. By the end of the course, students will be able to perform complete mobile application penetration tests, identify security vulnerabilities, generate professional vulnerability reports, and understand mitigation techniques used in modern mobile application security.

Basic knowledge of computers and internet concepts\r\n\r\nUnderstanding of websites and mobile applications\r\n\r\nBasic networking knowledge is recommended\r\n\r\nNo prior hacking experience required\r\n\r\nBasic understanding of Android and HTTP concepts is helpful

Certificate provided upon completion

The Web Application Penetration Testing (WAPT) course is designed for students, cybersecurity enthusiasts, developers, and IT professionals who want to learn how to identify and secure vulnerabilities in modern web applications. This course provides practical, hands-on training on web security concepts, ethical hacking methodologies, and penetration testing techniques used by security professionals. Students will learn how attackers exploit vulnerabilities and how organizations can defend against them. The course covers OWASP Top 10 vulnerabilities, reconnaissance, information gathering, authentication testing, session management flaws, SQL Injection, Cross-Site Scripting (XSS), Cross-Site Request Forgery (CSRF), file upload vulnerabilities, command injection, API security testing, and secure coding practices. Students will work with industry-standard tools such as Burp Suite, OWASP ZAP, Nmap, Nikto, SQLMap, and browser developer tools to perform real-world security assessments. By the end of the course, students will be able to perform complete web application penetration tests, generate professional vulnerability reports, and understand mitigation techniques used in modern cybersecurity environments.

Basic knowledge of computers and internet concepts\r\nUnderstanding of websites and web browsers\r\nBasic networking knowledge is recommended\r\nNo prior hacking experience required\r\nBasic understanding of HTML HTTP and web technologies is helpful but not mandatory

Certificate provided upon completion