Web Security & VulnHawk Mastery

The OWASP Top 10 in practice: find and fix vulnerabilities, and scan your projects with VulnHawk.

进阶 7 个模块 约 12 小时 免费
开始学习
  1. 1 The Security Mindset and the Rules of Testing Think like an attacker, understand risk, and only ever test systems you are authorised to test. 25 分钟
  2. 2 Injection: SQL, Commands and Templates How injection works, how to find it and the coding patterns that prevent it. 35 分钟
  3. 3 Cross-Site Scripting and Content Security Policy Stored, reflected and DOM XSS, output encoding, safe rendering and CSP headers. 35 分钟
  4. 4 Broken Access Control and Authentication IDOR/BOLA, privilege escalation, session security, password storage, MFA and rate limits. 40 分钟
  5. 5 Server Misconfiguration, SSRF, Uploads and Dependencies Headers, debug mode, secrets, SSRF, file upload risks and vulnerable libraries. 35 分钟
  6. 6 Automated Scanning with VulnHawk and Other Tools What scanners find and miss, running scans safely, triaging results and fitting them into CI. 35 分钟
  7. 7 Secure Development Lifecycle and Incident Response Threat modelling, security reviews, logging and monitoring, and what to do when something goes wrong. 35 分钟