OSWA — Foundational Web Application Assessments (WEB-200)
Foundational web pentest credential — black box.
OSWA bridges the gap between CEH-level web knowledge and the elite OSWE. Black-box testing of realistic web apps with all major attack classes plus modern web vulnerabilities.
Outcomes — concrete, measurable.
Every capability you walk away with, mapped to the cybersecurity domains and the career roles they unlock in India + UAE.
- Conduct end-to-end web application assessmentsCapability·Foundational60%
- Exploit OWASP Top 10 plus SSRF, IDOR, JWT issuesOffensive·Practitioner77%
- Pass the 24-hour OSWA examCapability·Specialist94%
- Capability2
- Offensive1
- Web Application Pen-Tester₹10–18 LPA2–4 years
- Application Security Engineer₹15–25 LPA3–5 years
14 modules. 60-day OffSec lab + 24-hour exam.
Search modules and topics, and switch between Split and Track views to see how every module flows into the next.
Module 01 · Tools for the Web Assessor
- 01Burp Suite Pro proxy & repeater
- 02ffuf, gobuster, sqlmap basics
- 03Browser DevTools workflows
The same toolkit our consultants use on real engagements.
Not academic exercises. The tools below are exactly what Macksofy consultants run on paying client engagements every week — so the muscle memory you build in class carries straight into your first job.
What roles open up after you complete this.
| Role | Salary band | Experience |
|---|---|---|
| Web Application Pen-Tester | ₹10–18 LPA | 2–4 years |
| Application Security Engineer | ₹15–25 LPA | 3–5 years |
We don’t promise jobs. We open doors.
Macksofy's placement desk works directly with 80+ hiring partners across India and the UAE. Resume coaching, mock interviews and direct intros included.
- 1:1 resume + LinkedIn rewrite with our hiring desk
- Mock interviews with active practitioners
- Direct intros to BFSI, fintech and Big-4 partners
- UAE placement support (Dubai, Abu Dhabi)
Things students ask before enrolling.
Get a fixed-price proposal in 48 hours.
Tell us about your security need — pentest, audit, training or a wider engagement. A senior consultant will reply within a few business hours.
- CERT-In Empanelled
- EC-Council ATC · CompTIA Authorized
- 20,000+ professionals trained
- India + UAE engagements