Overview What You Will Learn Curriculum Instructor Student Reviews

Course Overview

Master the essential skills to mitigate the top 10 web application security risks effectively. This learning path will get the customers introduced to OWASP which will help minimize security risks against applications. Learners will also understand the top 10 vulnerabilities in Docker and Kubernetes environments, while they'll also perform penetration testing activities using OWASP ZAP.

What You Will Learn

  • Explore injection vulnerabilities
  • Understand broken authentication
  • Learn to use the OWASP Top 10 to ensure your applications minimize the security risks in the list
  • Understand common exploitation techniques used to test software security
  • Learn how to ethically check and implement defenses against the OWASP top 10
  • Learn how to secure container images and prevent supply chain attacks
  • Understand the complete layout of OWASP ZAP.

Program Curriculum

Content

Chapter 1: OWASP Top 10

Content
  • Chapter 1: World Wide Web Fundamentals
  • Chapter 2: Injection Flaws
  • Chapter 3: Broken Authentication
  • Chapter 4: Sensitive Data Exposure
  • Chapter 5: XML External Entities
  • Chapter 6: Broken Access Control
  • Chapter 7: Security Misconfiguration
  • Chapter 8: Cross-Site Scripting (XSS)
  • Chapter 9: Insecure Deserialization
  • Chapter 10: Using Components with Known Vulnerabilities
  • Chapter 11: Insufficient Logging & Monitoring
  • Chapter 12: What Has Changed in OWASP 2021?
  • Chapter 13: Server-side Request Forgery​ (SSRF)

Content
  • Chapter 1: Introduction
  • Chapter 2: Host OS Vulnerabilities
  • Chapter 3: Insecure Container Images
  • Chapter 4: Insecure Container Configurations
  • Chapter 5: Container Escape Vulnerabilities
  • Chapter 6: Inadequate Process Isolation
  • Chapter 7: Inadequate Network Segmentation
  • Chapter 8: Inadequate Logging and Monitoring
  • Chapter 9: Insecure Data Storage in Containers
  • Chapter 10: Mounting Docker Socket
  • Chapter 11: Inadequate Resource Limits
  • Chapter 12: Inadequate Security Controls
  • Chapter 13: Introduction to OWASP Kubernetes Top 10
  • Chapter 14: Insecure Workload Configurations
  • Chapter 15: Overly Permissive RBAC Configurations
  • Chapter 16: Lack of Centralized Policy Enforcement
  • Chapter 17: Inadequate Logging and Monitoring

Content
  • Chapter 1: Introduction and Setup
  • Chapter 2: Configuration and Features
  • Chapter 3: Vulnerability Assessment of Web Applications
  • Chapter 4: Penetration Testing of Web Applications
  • Chapter 5: Reporting

Content
  • Chapter 1: A1.2017 Injections
  • Chapter 2: A2.2017 Broken Authentication
  • Chapter 3: A3.2017 Sensitive Data Exposure
  • Chapter 4: A4.2017 XXE
  • Chapter 5:A5.2017 Broken Access Control
  • Chapter 6: A6.2017 Security Misconfigurations
  • Chapter 7: A7.2017 XSS7
  • Chapter 8: A8.2017 Insecure Deserialization
  • Chapter 9: A9.2017 Components with Vulnerabilities
  • Chapter 10: A10.2017 Insufficient Logging and Monitoring
  • Chapter 11: How to Prevent .. As a Developer
  • Chapter 12: A4.2017 - XXE in Depth
  • Chapter 13: A7.2017 XSS in Depth
  • Chapter 14:M1. Improper Platform Usage
  • Chapter 15: M2.2016 Insecure Data Storage
  • Chapter 16: M3.2016: Insecure Communication
  • Chapter 17: M4.2016: Insecure Authentication
  • Chapter 18: M5. 2016: Insufficient Cryptography
  • Chapter 19: OWASP M6. Insecure Authorization
  • Chapter 20: OWASP M7. Bad Code Quality
  • Chapter 21: M8: Code Tampering
  • Chapter 22: M9: Reverse Engineering
  • Chapter 23: OWASP Mobile M10: Extraneous Functionality
  • Chapter 24: OWASP API Top 10
  • Chapter 25: API Hacking with Postman
  • Chapter 26: OWASP Top 10 Attacks - Demo
Load more modules

Instructor

Sunil Gupta

A computer programmer and cybersecurity expert, Sunil Gupta consults in information technology with a focus on cybersecurity. He is an invited speaker for and a member of many key organizations. Sunil is a technology visionary and cybersecurity professional who thrives on solving complex problems. His career highlights include working with various companies, organizations and products. He is passionate about customer service and his role as a cybersecurity expert, and always exceeds his clients’ expectations. Sunil performs leading-edge security consulting and works in research and development as a security expert to advance the state of the art in information systems security.

Paulo Silva Silva

Paulo Silva holds a bachelor’s degree in computer science and a master in Innovation and Technological Entrepreneurship. With more than 15 years professional experience as software developer, in the last 6 years he has been completely focused on security. Nowadays he is an independent senior security researcher, collaborating with several organizations to find and fix security weaknesses in their systems.

Since 2010 Paulo is OWASP’s volunteer contributing to several projects such as the OWASP Top 10 and OWASP API Security Top 10 in which he is the main contributor. He’s also the OWASP Go Secure Coding Practices project leader.

Used to attend security conferences all over the world, Paulo is frequently invited to deliver awareness and security training in the academia. He has also authored several security articles and secure programming guides.

Scott Cosentino

Scott Cosentino is a developer and teacher who is passionate about learning. He works primarily in software development and computer security. Aside from this, he has taught students a variety of programming-related topics, and he loves to inspire students to be passionate about the topics that he teaches. He has experience in both large classes and one on one teaching. Scott believes that mathematics and computer science can be approachable and fun topics. he tailors his courses so that they are easy to comprehend, with an exploration of what, why, and how of every topic. He understands that these topics are not a spectator sport, so he provides as many examples and practises problems as possible so that the viewer can follow along and learn!

Wesley Thijs

He is the XSS Rat, an experienced ethical hacker who stands for quality and who believes knowledge is a building block we can all use to grow bigger than we ever were. As a software test he has a unique skill set that center around logic flaws and IDORs which is not seen very much by other hunters. This gives him the advantage of finding less duplicates and maximizing his chance of finding a vulnerability by picking the correct target and applying the correct test strategy.

A. Enes Turan

Enes is a Certified Professional Cloud Architect and Kubernetes enthusiast with several years of experience working with DevOps, container orchestration, and platform engineering. He has helped multiple organizations implement DevOps practices and improve the reliability and scalability of their applications on Kubernetes. He also has experience in designing and implementing cloud infrastructure and has a deep understanding of best practices for cloud security, compliance, and governance. He has a strong passion for sharing his knowledge with others and helping them to be successful with DevOps, Kubernetes, and Cloud Architecture.

Join over 1 Million professionals from the most renowned Companies in the world!

certificate

Choose the Pro Plan That Fits Your Learning Journey

Invest in your future with flexible Pro subscription plans. Whether you're starting your cybersecurity journey or expanding your expertise, choose the membership duration that works for you and gain access to our complete learning platform.

Monthly Plans
Annual Plans
Save 20% with our annual plans!

Pro

Ideal for continuous learning, offering extensive resources with 900+ courses and diverse Learning Paths to enhance your skills.

$ 599.00
Billed annually or $69.00 billed monthly
Get Started Now
Start your 7-day trial for $1

What is included

  • Access to 900+ Premium Short Courses
  • 70+ Structured Learning Paths
  • Validation of Completion with All Courses and Learning Paths
  • New Courses Added Every Month
Early Access Offer

Pro +

Experience immersive learning with Practice Labs and CTF Challenges for comprehensive skill-building.

$ 699.00
Billed annually or $79.00 billed monthly
Get Started Now
Start your 7-day trial for $1

Everything in Pro and

  • 600+ Practice Labs with Guided Instructions
  • 400+ CTF Challenges with Detailed Walkthroughs
  • New Practice Labs and Challenges Added Every Month

Related Learning Paths

  • Mastering Digital Forensics Learning Path
    Skill Path

    Mastering Digital Forensics

    3 Premium Courses

    10 hr 33 m

    Detect and backtrack cyber criminals and hackers with digital...

    $199.00
  • Conducting Reconnaissance for Cybersecurity
    Skill Path

    Conducting Reconnaissance for Cybersecurity

    2 Premium Courses

    11 hr 53 m

    Learn to perform scanning and attacking effectively

    $99.00
  • gateway to programming fundamentals
    Skill Path

    Gateway to Programming Fundamentals

    5 Premium Courses

    42 hr 47 m

    Become a High-level Programmer Equipped with Secure Software ...

    $149.00
  • Integrating Security Into IoT
    Skill Path

    Integrating Security into IoT

    6 Premium Courses

    27 hr 52 m

    Learn about the various cyber-threats that revolve around the...

    $199.00
  • building secure java applications learning path
    Skill Path

    Building Secure Java Applications

    6 Premium Courses

    33 hr 14 m

    Learn security coding practices and defensive measures needed...

    $99.00
  • Becoming a DevOps Professional
    Career Path

    Becoming a DevOps Professional

    5 Premium Courses

    84 hr 29 m

    $199.00
  • Programming for Ethical Hackers
    Skill Path

    Programming for Ethical Hackers

    10 Premium Courses

    62 hr 32 m

    Gain expertise in one of the most underrated but useful skill...

    $199.00
  • Mastering Ethical Hacking Tools.
    Skill Path

    Mastering Ethical Hacking Tools

    10 Premium Courses

    42 hr 0 m

    Gain hands-on mastery of essential ethical hacking tools used...

    $199.99
1 49
View all

Quick View

Mastering OWASP Fundamentals

  • Mastering OWASP Fundamentals
1 1
What's included
  • Full Video Access
  • Self-Paced Study Guide
  • 6 months of access to virtual labs
  • Once redeemed, this bundle will be valid for 12 months
  • Self-Paced Study Guide
  • Exam Voucher + Retake
View full details

Mastering OWASP Fundamentals

Mastering OWASP Fundamentals