🌐
Web Security (OWASP Top 10)
Injection, XSS, auth flaws, and modern web attacks
Module 1
Injection Attacks
How SQL injection works, blind variants, and how to stop it.
6 lessons
Module 2
XSS & CSRF
Cross-site scripting flavors, CSRF, and browser-side defenses.
6 lessons
Module 3
Authentication Flaws
Broken auth, sessions, JWT pitfalls, and IDOR.
6 lessons
Module 4
Modern Web Attacks
SSRF, XXE, clickjacking, and dangerous misconfigurations.
6 lessons
Module 5
Defense Playbook
Map OWASP Top 10 to fixes: headers, uploads, access control.
6 lessons
Module 6
Race Conditions & Request Smuggling
Concurrent bugs, limit overrun races, and HTTP desync attacks.
6 lessons