Application SecurityOWASP Top 10 & Common Vulnerabilities

64 items

1

Weak Password Storage

Code Quiz
2

Missing Input Validation

Code Quiz
3

Insecure Deserialization

Code Quiz
4

Spot the SQL Injection

Code Quiz
5

Information Leak in Errors

Code Quiz
6

Find the XSS Flaw

Code Quiz
7

Outdated Vulnerable Dependency

Code Quiz
8

Debug Mode Enabled

Code Quiz
9

Path Traversal Flaw

Code Quiz
10

Hardcoded Secret

Code Quiz
11

Sensitive Data in Logs

Code Quiz
12

Insecure Direct Object Reference

Code Quiz
13

Missing Authorization Check

Code Quiz
14

Command Injection Risk

Code Quiz
15

CSRF Vulnerability

Code Quiz
16

Insecure Design

Slides / Video
17

Injection & SQL Injection Basics

Slides / Video
18

Weak or Default Passwords

Flashcard
19

Clickjacking

Flashcard
20

Security Misconfiguration

Flashcard
21

Vulnerable and Outdated Components

Flashcard
22

Cross-Site Request Forgery (CSRF)

Flashcard
23

Sensitive Data Exposure

Flashcard
24

Logging and Monitoring Failures

Flashcard
25

Server-Side Request Forgery (SSRF)

Flashcard
26

Insecure Design

Flashcard
27

Injection

Flashcard
28

Cross-Site Scripting (XSS)

Flashcard
29

Insecure Direct Object References

Flashcard
30

Cryptographic Failures

Flashcard
31

Authentication Failures

Flashcard
32

Broken Session Management

Flashcard
33

Software and Data Integrity Failures

Flashcard
34

Broken Access Control

Flashcard
35

SQL Injection

Flashcard
36

Command Injection

Flashcard
37

Cryptographic Failures Explained

Slides / Video
38

Broken Access Control

Slides / Video
39

What Is the OWASP Top 10?

Slides / Video
40

What Is Application Security

Slides / Video
41

Basic Security Mitigation Principles

Slides / Video
42

Cross-Site Request Forgery (CSRF) Basics

Slides / Video
43

Cross-Site Scripting (XSS) Basics

Slides / Video
44

Server-Side Request Forgery (SSRF)

Slides / Video
45

Security Logging and Monitoring Failures

Slides / Video
46

SQL Injection Defense

Quiz
47

Logging and Monitoring Failures

Quiz
48

Authentication Failures

Quiz
49

Server-Side Request Forgery

Quiz
50

Cross-Site Scripting (XSS)

Quiz
51

Cryptographic Failures

Quiz
52

Security Misconfiguration

Quiz
53

Injection Fundamentals

Quiz
54

Command Injection

Quiz
55

Outdated Components Risk

Quiz
56

Insecure Design

Quiz
57

Cross-Site Request Forgery

Quiz
58

Insecure Direct Object References

Quiz
59

Data Integrity Failures

Quiz
60

Broken Access Control Basics

Quiz
61

Software and Data Integrity Failures

Slides / Video
62

Identification and Authentication Failures

Slides / Video
63

Vulnerable and Outdated Components

Slides / Video
64

Security Misconfiguration

Slides / Video
Code QuizBeginner

Weak Password Storage

Identify insecure password storage using plaintext or fast hashing.

Codejavascript
function registerUser(username, password) {
  const hash = crypto.createHash('md5').update(password).digest('hex');
  db.save({ username, password: hash });
}

What is the security bug in this code?