Free study resource
A free domain-by-domain map of the GIAC Web Application Penetration Tester exam, with each domain's weighting and what to focus on. Use it to plan your study and spot gaps fast.
Built to mirror the real exam
These domains follow the published GWAPT objectives. The issuer sets out what the exam covers but not how much each area is worth, so the percentages below are our own study weighting, built to match the shape of the real exam as closely as the published material allows. We would rather tell you that than present a split as something it is not.
CyberCertPrep is an independent study resource and is not affiliated with or endorsed by any certification body.
Core concepts, terminology, and the high-yield ideas behind Web Application Reconnaissance. This domain makes up 20% of our GWAPT practice set, weighted to reflect how much of the real exam it covers.
Core concepts, terminology, and the high-yield ideas behind Authentication & Session Attacks. This domain makes up 20% of our GWAPT practice set, weighted to reflect how much of the real exam it covers.
Core concepts, terminology, and the high-yield ideas behind Injection Attacks. This domain makes up 25% of our GWAPT practice set, weighted to reflect how much of the real exam it covers.
Core concepts, terminology, and the high-yield ideas behind Server-Side & Logic Flaws. This domain makes up 20% of our GWAPT practice set, weighted to reflect how much of the real exam it covers.
Core concepts, terminology, and the high-yield ideas behind Web Application Exploitation Tools. This domain makes up 15% of our GWAPT practice set, weighted to reflect how much of the real exam it covers.
Drop your email and we'll send the complete per-domain summary pack and a suggested study plan for GWAPT, free.
No spam. Unsubscribe anytime.