Application Security
Checking access...
Applications are the most attacked surface. This module covers the OWASP Top 10, common vulnerabilities, secure coding, and API security.
Pages
| Page | Description |
|---|---|
| OWASP Top 10 | Deep dive into the top 10 web app vulnerabilities |
| SQL Injection | Types of SQLi, parameterized queries, NoSQL injection |
| XSS & CSRF | Reflected/stored/DOM XSS, CSRF, CSP, SameSite cookies |
| Authentication & Session Security | Credential stuffing, JWT security, session fixation |
| Secure SDLC | Threat modeling with STRIDE, SAST/DAST integration |
| API Security | API auth, rate limiting, GraphQL security, OWASP API Top 10 |
| AppSec Lab | Hands-on web app security review |
| Flashcards | Test your knowledge |