Episode 174: Web Application Penetration Testing Tools & Techniques with Jordan

About this episode

In this episode, Brad Causey and guest Jordan Natter discuss essential tools and techniques for web application penetration testing.

In Episode 174, host Brad Causey is joined by guest Jordan Natter for a practical, tool-focused conversation on web application penetration testing. Together they break down the essential tools and Burp Suite Pro extensions that make up a modern web app pen testing toolkit. Topics covered include: Burp Suite Pro vs. OWASP ZAP — comparing capabilities, extensions, and use casesCSP Auditor — identifying unsafe Content Security Policy directivesJSON Web Token (JWT) extension — surfacing and tamp...

People in this episode

Host: Brad Causey

Guest: Jordan Natter

Topics covered

• web application penetration testing
• Burp Suite Pro
• OWASP ZAP
• CSP Auditor
• JSON Web Token
• penetration testing tools
• security policies

Keywords

• penetration testing
• web applications
• Burp Suite
• OWASP
• security tools
• CSP
• JWT

Mentioned in this episode

Products: Burp Suite Pro, OWASP ZAP, CSP Auditor, JSON Web Token (JWT) extension

More episodes of The Cyber Threat Perspective

• Episode 184 | Active Directory Isn't Dead. It's Just Undefended. · June 11, 2026 · 29 min
• Episode 183 | OWASP Top 10 Part 2: Security Misconfigurations That Get You Hacked · June 5, 2026 · 29 min
• Episode 182: Patching Crisis — Vulns Now #1 Attack Vector (2026 Verizon DBIR) · May 27, 2026 · 31 min
• [Replay] Episode 159: How to Break Into Cybersecurity — What Actually Works · May 20, 2026 · 45 min
• Episode 181: AI Zero Days (Google Threat Intelligence Report) · May 12, 2026 · 41 min
• Episode 180: Cybersecurity Echo Chambers — How to Think Critically in a Hype-Driven Industry · May 7, 2026 · 29 min