eWPT case studies
eWPT · Put your knowledge to work in context.
The eWPT (Web Application Penetration Tester) is a cybersecurity certification listed by INE among its cybersecurity certifications, alongside the eJPT, eCPPT, eMAPT, eWPTX and others. INE describes itself as offering a continuous learn-by-doing training model built on hands-on, technically challenging material, and its certification pages sit within a catalogue that also includes digital badging, certification renewal and an online certification verification service. The eWPT case studies are 5 cases and about 3,675 words.
1Public Invoice Bucket, Shared Cookie Domain, and a Verbal Green Light
You are the lead tester on a four-week engagement for an online retailer. The signed scope lists .shop.example.com as in scope, explicitly excludes payments.example.com (run by a PCI-compliant payment processor) and every SaaS vendor, and permits production testing only between 22:00 and 04:00 UTC at no more than 5 requests per second.
729 words, about 4 min23,412 Hostnames, a Wildcard, and Internal Names in Certificate Transparency
Acme Corp hires you for a reconnaissance-only phase before a two-week application test. Starting from the single root domain acme.example , you run amass, subfinder and a certificate-transparency pull, producing 3,412 unique hostnames.
739 words, about 4 min3PDF Renderer SSRF: Blocklisted Metadata, a Redirect, and a Stop Condition
You are testing a document-conversion SaaS. A feature accepts a URL and renders it server-side to PDF via POST /api/render {"url":"https://..."} .
753 words, about 4 min4Stored XSS Against Support Agents Behind a Strict CSP and HttpOnly Cookies
A 900-person insurer runs a custom support portal. Agents triage tickets in an admin SPA at https://portal.example.com/admin .
711 words, about 4 min5Ninety-Six Scanner Highs, One Real Customer Invoice, and a Report Due Friday
Two days before the report deadline you have 1,400 pages of scanner output, 96 items the scanner labelled High, and your own manual notes. Three findings compete for the top of the executive summary.
743 words, about 4 min