Web App Security (OWASP Top 10)

This course provides in-depth training on securing web applications using the OWASP Top 10 framework. Participants will learn to identify, exploit, and mitigate vulnerabilities commonly found in web applications, such as injection attacks, broken authentication, and security misconfigurations. The course combines theory with practical, hands-on exercises using industry-standard tools, preparing students to secure modern web applications.

Key Learning Outcomes:

• Understand and implement the OWASP Top 10 security risks.
• Identify vulnerabilities such as SQL Injection, XSS, and insecure configurations.
• Use tools like Burp Suite and OWASP ZAP for security testing.
• Apply mitigation techniques to enhance web application security.

Course Modules and OWASP Top 10

Detailed OWASP Top 10:

• A01:2021 - Broken Access Control
• A02:2021 - Cryptographic Failures
• A03:2021 - Injection (SQL, Command, etc.)
• A04:2021 - Insecure Design
• A05:2021 - Security Misconfiguration
• A06:2021 - Vulnerable and Outdated Components
• A07:2021 - Identification and Authentication Failures
• A08:2021 - Software and Data Integrity Failures
• A09:2021 - Security Logging and Monitoring Failures
• A10:2021 - Server-Side Request Forgery (SSRF)

Tools Used:

• Burp Suite: Web application testing and vulnerability scanning.
• OWASP ZAP: Automated vulnerability scanning.
• SQLMap: SQL injection testing.
• Nikto: Web server scanning.