Web & Application Security
The OWASP Top 10, done properly: broken access control, injection, XSS, CSRF, SSRF, security headers and supply chain. You attack a small app, then you fix it.
Every lesson runs real code in your browser, checked the moment you submit. No installing anything, no setup, no waiting.
Start Web & Application Security freeWhat this course covers
- Everything Is a Request You Do Not Control
- The OWASP Top 10, as a Map
- Broken Access Control
- IDOR: Changing the Number in the URL
- Who You Are, and What You May Do
- Sessions, Cookies and Tokens
- SQL Injection, With a Real Database
- The Fix: Never Build the Sentence
- Cross-Site Scripting
- Escaping, Context, and a Real Safety Net
- CSRF: Making the Browser Ask for You
- Same-Origin Policy, and CORS
- SSRF: Making the Server Fetch It
- Path Traversal and File Uploads
- Command Injection
- Headers That Do Real Work
- Secrets, and Making Guessing Expensive
- Other People's Code
- What Your Errors and Logs Give Away
- Reading Code Like an Attacker
Other courses
Learn to think like a problem-solver before you write a single line of code. Break big …
Your first Python course, no experience needed. Learn variables, loops, functions, and …
Level up your Python with comprehensions, lambdas, error handling, files, modules, and …
Master OOP in Python: classes, objects, inheritance, polymorphism, encapsulation, abstr…
Go deeper in Python: decorators, generators, type hints, regex, JSON, SQLite, testing, …
Core CS: arrays, lists, stacks, queues, hash tables, trees, graphs, sorting, searching,…
Build your own 2D games from scratch: the game loop, sprites, movement, collisions, and…
Learn Java from zero, with no programming background needed. Write your first program, …
Learn C++ from zero, with no programming background needed. Start with your first progr…
Learn C from zero, with no programming background needed. The language that Unix, Linux…
Learn JavaScript from scratch: variables, types, loops, functions, arrays and objects, …
Build for the browser: structure pages with HTML, style them with CSS, then use live AP…