Web Application Security & OWASP Top 10

Learn web application security using local practice applications and authorised test environments. Curriculum: 1) HTTP, cookies, sessions and browser developer tools; 2) Authentication and access-control flaws; 3) Injection and input validation; 4) XSS and output encoding; 5) CSRF, SSRF and security misconfiguration concepts; 6) File upload and path traversal risks; 7) Burp Suite/ZAP workflow in a lab; 8) Secure fixes and retesting; 9) Final assessment report.

Prerequisites: Basic web development helpful. Level: Intermediate.