Public credential record
Verified credential
Credential awarded to
Vũ Quốc Huy
Certified Web App Penetration Testing Apprentice
Earn this credential
Credential details
-
Certificate ID
-
KSA-AX4HFPFW2601
-
Issued on
- January 26, 2026
-
Exam version
- 1.0
-
Result
- Passed
Candidates must achieve at least
75%
to earn this credential.
Exam topic breakdown
6
areas
Reconnaissance & Application Discovery
15%
- Identify server-side technologies and application stack components
- Extract version information from headers, responses, and exposed metadata
- Discover sensitive or restricted endpoints through application behavior
- Identify exposed administrative or privileged access paths
- Recognize security-relevant information leakage during reconnaissance
HTTP Fundamentals & Request Handling
3%
- Identify and test basic HTTP method handling
- Identify key request/response headers used by the application
- Assess cookie configuration and state-handling controls
- Identify weaknesses in request validation for state-changing actions
Client-Side Injection
12%
- Identify Cross-Site Scripting (XSS)
- Identify HTML Injection
- Understand impact of improper input sanitization
- Recognize differences between injection types and contexts
Authorization & Access Control Weaknesses
40%
- Identify Insecure Direct Object Reference (IDOR) vulnerabilities
- Access unauthorized customer or user data
- Identify privilege escalation paths between user roles
- Gain elevated privileges through logical flaws
Authentication Weaknesses
20%
- Identify weaknesses in login flows
- Access restricted accounts without proper credentials
File and Path Handling Basics
10%
- Assess features for improper file authorization checks
- Identify path handling weaknesses
