COMING SOON
MOBILE SECURITY
Mobile Application Penetration Testing
A new learning path is on the way. Course details and dates will be announced.
Stay in the loopEnquire
PRACTICAL CYBERSECURITY TRAINING
Learn security.
Build the skill.
Go beyond knowing what a vulnerability is. Learn to find it, understand its impact, and report it clearly.
✓ Live on Zoom✓ Urdu / Hindi✓ Hands-on learning
THE PRACTICE LAB● LEARN BY DOING
request → investigation → insight
01Understand the behavior✓
02Test your hypothesis✓
03Document the impact✓
From finding to a clear report.That's a skill you can demonstrate.
THINK. TEST. DOCUMENT.SAHI / 01
BUILT FOR THE NEXT STEP IN YOUR CAREER
Bug bounty hunting · Web application security · Penetration testing
01 / EXPLORE OUR COURSES
Your next skill starts here.
Focused learning. Practical experience.
A foundation you can build on.
REGISTRATION OPEN
WEB SECURITY
Practical Web Application Security & Bug Bounty Hunting
Understand vulnerabilities. Test manually. Learn to report your findings.
1 month · Basic to medium
COMING SOON
NETWORK SECURITY
Network Penetration Testing
Expand your security skill set. Course details and dates will be announced.
Stay in the loopEnquire
NOW ENROLLING / FIRST BATCH
Practical Web Application Security & Bug Bounty Hunting
Build your foundation in manual web security testing, one vulnerability at a time.
Learn to understand and exploit vulnerabilities in hands-on labs, then turn your findings into reports that demonstrate your skills. A practical starting point for bug bounty hunting and web security job or internship opportunities.
START DATE1 November 2026
DURATION1 month
CLASS TIME8–9 PM Pakistan time
FORMATLive online · Zoom
LANGUAGEUrdu / Hindi
LEVELBasic to medium
A good fit for CS/IT students and professionals.
Bring basic web development and system administration knowledge.
THE CURRICULUM
Know what you're learning.
01
Injection & server-side
- SQL Injection
- Command Injection
- Path Traversal
- Server-Side Request Forgery (SSRF)
- XXE Injection
- NoSQL Injection
02
Identity & application logic
- Authentication
- Access Control
- Business Logic
- Race Conditions
- File Upload Vulnerabilities
03
Browser security
- Cross-Site Scripting (XSS)
- Cross-Site Request Forgery (CSRF)
- Cross-Origin Resource Sharing (CORS)
- DOM-Based Vulnerabilities
04
Testing & reporting
- API Testing
- Host Header Attacks
- Information Disclosure
- Report Writing
19 TOPICS
One focus: understand the vulnerability and test it manually.
02 / THE WAY WE LEARN
Understanding is the start.
Practice makes it yours.
A practical learning loop that connects
concepts, testing, and communication.
Know the why.
Explore how vulnerabilities work and what makes an application behave unexpectedly.
Do the work.
Apply manual testing techniques to the tasks and labs provided during the course.
Make it clear.
Submit reports that explain your findings and demonstrate the skills you've developed.
A certificate earned through practice. Solve the hands-on labs/tasks and submit reports demonstrating your skills to qualify.
03 / MEET YOUR TRAINER
Zeeshan Akram
Synack Red Team member
OSCPBSCP
Learn web application security with a trainer focused on understanding vulnerabilities and exploiting them manually.
Classes are taught in Urdu/Hindi, with hands-on tasks, labs, and report submissions at the core of the learning experience.
Ask about the course04 / WHAT'S NEXT
Security services.
Coming soon.
IN THE WORKS
We're preparing the next chapter of SAHI Security. Our services and availability will be announced here.
Get in touchIs this course right for me?
The course is designed for CS/IT students and professionals at a basic-to-medium level. You should have basic web development and system administration knowledge before joining.
When and where are the classes?
The one-month course starts on 1 November 2026. Classes run from 8–9 PM Pakistan time, online on Zoom, and are taught in Urdu/Hindi. Contact us for the weekly class schedule.
What does the PKR 10,000 fee cover?
PKR 10,000 is the discounted fee for the complete one-month course for this first batch, reduced from the regular PKR 50,000. The course includes provided tasks/labs and report submissions.
How do I earn the certificate?
Students qualify by solving the hands-on labs/tasks and submitting reports that demonstrate their skills.
What can I work toward after the course?
The course helps you build a foundation for starting bug bounty hunting and pursuing web security jobs or internships. Your continued practice and the skills you demonstrate will shape your next steps.
How do I register?
Complete the Google registration form. For questions about enrollment, contact us on WhatsApp or email trainings@sahi-sec.com.
YOUR NEXT CHAPTER STARTS WITH A SKILL
Ready to get hands-on?
Join the first batch of Practical Web Application Security & Bug Bounty Hunting.