Web Security & the OWASP Top 10

This lesson provides an introduction to web security and the OWASP Top 10 vulnerabilities.

This lesson gives an overview of the risks associated with using components that have known vulnerabilities.

This lesson details the methods for mounting an attack using vulnerable components.

This lesson discusses the defenses against attacks that exploit known vulnerabilities in components.

This lesson illustrates the practical risks involved with using components that have known vulnerabilities.

This lesson provides an overview of unvalidated redirects and forwards as a security risk.

This lesson explains how to mount an attack using unvalidated redirects and forwards.

This lesson covers the defenses against attacks involving unvalidated redirects and forwards.

This lesson discusses the practical risks associated with unvalidated redirects and forwards.

This lesson provides an overview of injection vulnerabilities and their implications.

This lesson explains how to mount an attack using injection vulnerabilities.

This lesson discusses the defenses against injection attacks.

This lesson illustrates the practical risks associated with injection vulnerabilities.

This lesson provides an overview of broken authentication and session management vulnerabilities.

This lesson explains how to mount an attack exploiting broken authentication and session management.

This lesson discusses the defenses against broken authentication and session management attacks.

This lesson illustrates the practical risks associated with broken authentication and session management.

This lesson provides an overview of Cross-Site Scripting (XSS) vulnerabilities and their significance in web security.

This lesson explains how to mount an XSS attack, detailing the techniques used by attackers.

This lesson discusses various defenses against XSS attacks, including best practices for prevention.

This lesson illustrates the practical risks associated with XSS vulnerabilities through real-world examples.

This lesson provides an overview of Insecure Direct Object References (IDOR) and their implications for security.

This lesson explains how to mount an IDOR attack, highlighting the methods attackers use.

This lesson discusses defenses against IDOR vulnerabilities, focusing on strategies to mitigate risks.

This lesson illustrates the practical risks associated with IDOR through real-world scenarios.

This lesson provides an overview of Security Misconfiguration and its potential impact on web applications.

This lesson explains how to mount an attack exploiting security misconfigurations in web applications.

This lesson discusses defenses against security misconfiguration, emphasizing best practices for secure configurations.

This lesson illustrates the practical risks associated with security misconfiguration through real-world examples.