Web Security
Course Index
29 Lessons · 3 Sections
Master web application security — OWASP Top 10, SQL injection, XSS, CSRF, JWT vulnerabilities, SSRF & API security. Covers Burp Suite, OWASP ZAP & DevSecOps. Includes 5 production security builds including full OWASP audit.
29Lessons
3Sections
5Projects
FreeAccess
Section 1OWASP Top 10 & Core AttacksLessons 1–10
Lesson 1
What is Web Security?
Lesson 2
OWASP Top 10: Introduction
Lesson 3
SQL Injection
Lesson 4
XSS: Cross-Site Scripting
Lesson 5
CSRF: Cross-Site Request Forgery
Lesson 6
CORS: Cross-Origin Resource Sharing
Lesson 7
Clickjacking & Frame Security
Lesson 8
HTTPS, TLS & Certificate Security
Lesson 9
HTTP Security Headers
Lesson 10
Content Security Policy (CSP)
Section 2Advanced Security & DefencesLessons 11–22
Lesson 11
HSTS: Strict Transport Security
Lesson 12
Cookie Security: HTTPOnly & SameSite
Lesson 13
Input Validation & Sanitisation
Lesson 14
Password Hashing: bcrypt & Argon2
Lesson 15
JWT Security & Common Vulnerabilities
Lesson 16
Server-Side Request Forgery (SSRF)
Lesson 17
Path Traversal & File Inclusion
Lesson 18
Insecure Deserialization
Lesson 19
Security Logging & Monitoring
Lesson 20
Dependency Vulnerability Management
Lesson 21
API Security: OWASP API Top 10
Lesson 22
Security Testing: Burp Suite & ZAP
Section 3DevSecOps, Practice Labs & ProjectsLessons 23–29