This On-Demand product includes HTB Academy and Dedicated Labs.

The HTB Academy allows learners to navigate through Modules, that provide a more guided experience. Modules are broken into parts that include explanations, examples, and assessments.

With the HTB dedicated labs learners utilize virtualized machines that simulate a black-box pentesting experience. Challenges in Dedicated Labs are available in three difficulty levels: easy, medium, and hard. More difficult challenges are worth more points. Dedicated Labs are designed to work like the networks, endpoints, and servers that businesses use, so users can try advanced cyber exploitation techniques.

HTB Certified Web Exploitation Expert (HTB CWEE) is a highly hands-on certification that assesses candidates' skills in identifying advanced and hard-to-find web vulnerabilities using both black box and white box techniques. HTB CWEE certification holders will possess technical competency in the web security, web penetration testing, and secure coding domains at an advanced level and be well-versed in the application debugging, source code review, and custom exploit development aspects of web security testing. They will also be able to professionally conduct web penetration tests against modern and highly secure web applications, as well as report vulnerabilities found in code or arising from logical errors.

The HTB CWEE certification represents the next step in advancing beyond the HTB Certified Bug Bounty Hunter (HTB CBBH) certification.

Key Differentiators           

Continuous Evaluation - To be eligible to start the examination process, one must have completed all modules of the "Senior Web Penetration Tester" job-role path 100% first. Each module in the path comes with its own hands-on skills assessment at the end that students must complete to prove their understanding of the presented topics. The answers to the skills assessment exercises are not provided. Evaluation takes place throughout the journey not only during the examination!

Hands-on & Real-world Exam Environment - HTB Certified Web Exploitation Expert (HTB CWEE) candidates will be required to conduct advanced web penetration tests, encompassing both white box and black box approaches on multiple real-world and heterogeneous applications. HTB certifications are not based on and do not include multiple-choice questions!

Focus on Advanced & Applicable Skills - The "Senior Web Penetration Tester" job-role path advances the competencies acquired in the “Bug Bounty Hunter” job-role path. It emphasizes the development of sophisticated web exploitation abilities, including white box penetration testing, web application code reviewing, identifying elusive web vulnerabilities, crafting custom exploits, and devising patches for all detected vulnerabilities. This path is enriched with practical demonstrations that encompass a wide range of contemporary web vulnerabilities, thereby sharpening these skills. This comprehensive approach equips candidates with the proficiency needed to discover new, zero-day web vulnerabilities in future scenarios.

Outside-the-box Thinking - HTB Certified Web Exploitation Expert (HTB CWEE) candidates will be required to think outside the box and utilize the various skills and techniques they learned throughout the path to achieve the exam's objectives. Like in real-world engagements, creativity, and in-depth knowledge will be necessary for a successful outcome.

Commercial-grade Report Requirement - Successfully completing all required black box and white box web penetration testing activities is not enough to obtain the HTB Certified Web Exploitation Expert (HTB CWEE) certification. As part of their assessment, candidates must not only explain the process of identifying and exploiting vulnerabilities but also develop functional exploits. Additionally, candidates are expected to create patches for the vulnerabilities they uncover. HTB Certified Web Exploitation Expert (HTB CWEE) candidates will have to prove they are market-ready and client-centric professionals.

Seamless Experience Powered By Pwnbox - The entire exam and certification process can be conducted through the candidates’ browser, from start to finish. All black box and white box web penetration tests can be performed via the provided and in-browser Pwnbox. There are no infrastructural or tool