Dronacharya Batch-II

The API Security Testing course is designed for students, developers, cybersecurity enthusiasts, and IT professionals who want to learn how to test and secure modern APIs used in web and mobile applications. This course provides hands-on training on API penetration testing methodologies, API vulnerability assessment, authentication testing, authorization flaws, token security, and secure API implementation practices. Students will learn how APIs work, how attackers exploit insecure APIs, and how organizations can secure them against modern cyber threats. The course focuses on REST APIs, JSON-based communication, JWT authentication, API endpoints, and real-world attack scenarios. The course covers OWASP API Security Top 10 vulnerabilities including Broken Object Level Authorization (BOLA), Broken Authentication, Excessive Data Exposure, Rate Limiting issues, Server-Side Request Forgery (SSRF), Injection flaws, and security misconfigurations. Students will use industry-standard tools such as Postman, Burp Suite, OWASP ZAP, Swagger, and browser developer tools for API testing and vulnerability analysis. By the end of the course, students will be able to perform complete API security assessments, identify critical vulnerabilities, generate professional security reports, and understand API defense strategies used in modern applications.

Basic knowledge of computers and internet concepts Understanding of websites and web applications Basic networking knowledge is recommended No prior hacking experience required Basic understanding of HTTP requests and responses is helpful

The Ethical Hacking course is designed to provide students with practical cybersecurity skills used by professional penetration testers and security analysts. In this course, students will learn how hackers identify vulnerabilities in systems, networks, and web applications — and how organizations protect themselves against cyber threats. The training includes hands-on practical sessions, real-world case studies, security tools, and guided labs to help students understand both offensive and defensive cybersecurity concepts. Students will gain experience in footprinting, scanning, enumeration, vulnerability analysis, password cracking, social engineering, web application testing, wireless security testing, and basic malware concepts. The course is suitable for beginners, IT students, networking professionals, and anyone interested in building a career in cybersecurity. By the end of the course, students will be able to perform basic penetration testing, identify security weaknesses, and understand industry-standard ethical hacking methodologies.

Basic computer knowledge Understanding of internet and networking fundamentals No prior ethical hacking experience required A laptop or desktop with internet access Willingness to learn practical cybersecurity concepts

The Mobile Application Penetration Testing course is designed for students, cybersecurity enthusiasts, developers, and IT professionals who want to learn how to test and secure Android and mobile applications against modern cyber threats. This course provides hands-on training on mobile application security concepts, penetration testing methodologies, reverse engineering, vulnerability assessment, and secure mobile application practices. Students will learn how attackers exploit insecure mobile applications and how organizations can protect their apps and user data. The course covers Android application structure, APK analysis, OWASP Mobile Top 10 vulnerabilities, insecure data storage, weak authentication, insecure communication, reverse engineering, code tampering, root detection bypass, API security testing, and mobile malware analysis. Students will work with industry-standard tools such as Burp Suite, MobSF, JADX, APKTool, Frida, ADB, Android Studio Emulator, and Postman to perform real-world mobile application security assessments. By the end of the course, students will be able to perform complete mobile application penetration tests, identify security vulnerabilities, generate professional vulnerability reports, and understand mitigation techniques used in modern mobile application security.

Basic knowledge of computers and internet concepts Understanding of websites and mobile applications Basic networking knowledge is recommended No prior hacking experience required Basic understanding of Android and HTTP concepts is helpful

The Web Application Penetration Testing (WAPT) course is designed for students, cybersecurity enthusiasts, developers, and IT professionals who want to learn how to identify and secure vulnerabilities in modern web applications. This course provides practical, hands-on training on web security concepts, ethical hacking methodologies, and penetration testing techniques used by security professionals. Students will learn how attackers exploit vulnerabilities and how organizations can defend against them. The course covers OWASP Top 10 vulnerabilities, reconnaissance, information gathering, authentication testing, session management flaws, SQL Injection, Cross-Site Scripting (XSS), Cross-Site Request Forgery (CSRF), file upload vulnerabilities, command injection, API security testing, and secure coding practices. Students will work with industry-standard tools such as Burp Suite, OWASP ZAP, Nmap, Nikto, SQLMap, and browser developer tools to perform real-world security assessments. By the end of the course, students will be able to perform complete web application penetration tests, generate professional vulnerability reports, and understand mitigation techniques used in modern cybersecurity environments.