WAHSWeb Application Hacking and Security
Find web vulnerabilities on a live CTF range: SQL injection, XSS, API flaws and more.

What WAHS covers.
WAHS is a performance-based, CTF-style web application security certification. The 6-hour live exam awards one of three tiers based on score: Associate (60% or more), Professional (75% or more) and Expert (90% or more). Targets include SQL injection, XSS, authentication bypass, API exploitation and security misconfigurations.
Skills you gain
- Identify and exploit common web application vulnerabilities
- Perform comprehensive web application security testing
- Discover and exploit SQL injection, XSS, and auth bypass issues
- Secure web applications against OWASP Top 10 attack vectors
Exam domains
- Web application vulnerabilities & exploitation
- SQL injection & database attacks
- Cross-site scripting (XSS)
- Security misconfigurations
- Authentication & authorization flaws
- API security & exploitation
Prerequisites
- Basic Linux command line knowledge
- Understanding of web technologies (HTTP, HTML, JavaScript)
- Basic scripting knowledge helpful
How ordering works.
Send a request
Use the contact page and name the certification you want.
We confirm the details
Our team replies with availability, final price and payment steps.
You receive the voucher
The voucher and booking instructions arrive by email.
Common questions.
How do I schedule the exam?
How is the WAHS exam structured?
What if I need a retake?
Can I order for a team?
More from EC-Council.
Certified Penetration Testing Professional (Challenge Edition)
Certified Penetration Testing Professional
CEH iWeek Upgrade
Certified Ethical Hacker v13 Elite
WAHS voucher, $399.
Request it now, or compare the other EC-Council certifications first.