APPSEC

Web Application Security

Identify, exploit, and patch common vulnerabilities in web applications.

~45 hours

Learning Objectives

OWASP Top 10Cross-Site Scripting (XSS)SQL Injection (SQLi)Cross-Site Request Forgery (CSRF)Insecure Direct Object References (IDOR)

Spin up OWASP Juice Shop, successfully execute a SQL injection attack to bypass the login screen, and review the code fix required to prevent it.

📖 Learn by Reading

OWASP Top Ten

OWASP Foundation

The industry-standard awareness document for web application security vulnerabilities and mitigations.

🎥 Learn by Watching

OWASP Top 10 Vulnerabilities Explained

F5 DevCentral • YouTube • 0:20:00

Explanation of the OWASP Top 10 security risks.