> For the complete documentation index, see [llms.txt](https://ganesha-hk.gitbook.io/cybersecurity-writeups/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://ganesha-hk.gitbook.io/cybersecurity-writeups/my-certifications/web-rta-cert.md).

# web-rta-cert

## Certified Web Red Team Analyst (Web-RTA)

### Overview

The **Certified Web Red Team Analyst (Web-RTA)** by Cyber Warfare Labs (CWL) is a hands-on web application penetration testing certification focused on identifying, exploiting, and understanding real-world web vulnerabilities.

Unlike theory-based certifications, Web-RTA emphasises practical attack scenarios where candidates analyse web applications, discover vulnerabilities, and exploit them using industry-standard tools and methodologies.

This certification marks my first major milestone in my cybersecurity journey and strengthened my understanding of modern web application security from an attacker's perspective.

***

### Skills Learned

Throughout this program, I gained practical experience in identifying and exploiting various server-side web vulnerabilities, including:

* SQL Injection (SQLi)
* Host Header Vulnerabilities
* XML External Entity (XXE) Injection
* Server-Side Template Injection (SSTI)
* NoSQL Injection
* GraphQL API Vulnerabilities
* Authentication & Session Attacks
* Access Control & IDOR
* OAuth 2.0 Vulnerabilities
* JWT Attacks
* Insecure Deserialization
* Server-Side Request Forgery (SSRF)
* Path Traversal
* File Upload Vulnerabilities

The course also improved my methodology for reconnaissance, payload testing, request manipulation, and vulnerability validation.

***

### Tools Used

#### Burp Suite

Used for intercepting HTTP requests, payload testing, request modification, automation, and out-of-band vulnerability detection. Key features used:

* Proxy
* Repeater
* Intruder
* Collaborator

#### FFUF (Fuzz Faster U Fool)

Used for:

* Directory and file discovery
* Parameter fuzzing
* Endpoint enumeration
* Hidden resource discovery

***

### Practical Examination

The Web-RTA examination required solving multiple practical web application security labs. During the assessment, I successfully identified and exploited vulnerabilities including:

* SQL Injection (SQLi)
* JWT Attacks
* OAuth 2.0 Vulnerabilities
* Server-Side Request Forgery (SSRF)
* XML External Entity (XXE) Injection

These challenges required combining enumeration, manual testing, payload customisation, and exploitation techniques rather than relying solely on automated tools.

***

### Key Takeaways

* Developed a structured methodology for web application penetration testing.
* Improved manual testing skills using Burp Suite and FFUF.
* Learned how modern web vulnerabilities are discovered and exploited in realistic environments.
* Strengthened problem-solving skills through hands-on examination labs.
* Built a strong foundation for advanced web penetration testing and bug bounty research.

***

### Certificate

![](/files/BYfIJS12Il3JecFuz4qp)


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://ganesha-hk.gitbook.io/cybersecurity-writeups/my-certifications/web-rta-cert.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.