OWASP Top 10 & Common Vulnerabilities

64 lessons in Application Security

• Information Leak in ErrorsCode Quiz
• Missing Input ValidationCode Quiz
• Sensitive Data in LogsCode Quiz
• Path Traversal FlawCode Quiz
• Insecure DeserializationCode Quiz
• Debug Mode EnabledCode Quiz
• Outdated Vulnerable DependencyCode Quiz
• Spot the SQL InjectionCode Quiz
• Find the XSS FlawCode Quiz
• Hardcoded SecretCode Quiz
• Missing Authorization CheckCode Quiz
• Weak Password StorageCode Quiz
• Command Injection RiskCode Quiz
• Insecure Direct Object ReferenceCode Quiz
• CSRF VulnerabilityCode Quiz
• Insecure DesignSlides / Video
• Injection & SQL Injection BasicsSlides / Video
• ClickjackingFlashcard
• Insecure DesignFlashcard
• Security MisconfigurationFlashcard
• Authentication FailuresFlashcard
• Broken Session ManagementFlashcard
• InjectionFlashcard
• Server-Side Request Forgery (SSRF)Flashcard
• Command InjectionFlashcard
• Broken Access ControlFlashcard
• Logging and Monitoring FailuresFlashcard
• Insecure Direct Object ReferencesFlashcard
• Software and Data Integrity FailuresFlashcard
• Cross-Site Request Forgery (CSRF)Flashcard
• Sensitive Data ExposureFlashcard
• Weak or Default PasswordsFlashcard
• Cryptographic FailuresFlashcard
• SQL InjectionFlashcard
• Cross-Site Scripting (XSS)Flashcard
• Vulnerable and Outdated ComponentsFlashcard
• Cryptographic Failures ExplainedSlides / Video
• Broken Access ControlSlides / Video
• What Is the OWASP Top 10?Slides / Video
• What Is Application SecuritySlides / Video
• Basic Security Mitigation PrinciplesSlides / Video
• Cross-Site Request Forgery (CSRF) BasicsSlides / Video
• Cross-Site Scripting (XSS) BasicsSlides / Video
• Server-Side Request Forgery (SSRF)Slides / Video
• Security Logging and Monitoring FailuresSlides / Video
• Insecure Direct Object ReferencesQuiz
• Command InjectionQuiz
• SQL Injection DefenseQuiz
• Logging and Monitoring FailuresQuiz
• Authentication FailuresQuiz
• Server-Side Request ForgeryQuiz
• Cross-Site Scripting (XSS)Quiz
• Cryptographic FailuresQuiz
• Security MisconfigurationQuiz
• Injection FundamentalsQuiz
• Outdated Components RiskQuiz
• Insecure DesignQuiz
• Cross-Site Request ForgeryQuiz
• Data Integrity FailuresQuiz
• Broken Access Control BasicsQuiz
• Software and Data Integrity FailuresSlides / Video
• Identification and Authentication FailuresSlides / Video
• Vulnerable and Outdated ComponentsSlides / Video
• Security MisconfigurationSlides / Video