Courses
Structured learning paths through web security topics, each built around a set of hands-on labs.
5 courses found
SQL & Injection Attacks
A structured path through injection flaws — SQL, OS command, XXE, and NoSQL — covering how untrusted input reaches an interpreter and how to stop it.
Cross-Site Scripting Mastery
Reflected, stored, and DOM-based XSS from first principles, plus the CSP and output-encoding defenses that actually hold up.
Server-Side Request Forgery
How SSRF turns a web server into an attacker's proxy — internal service discovery, cloud metadata endpoints, and blind SSRF techniques.
Broken Authentication & Session Security
JWT forgery, algorithm confusion, and session-management flaws that let attackers become someone else without ever guessing a password.
Insecure Deserialization
How unchecked deserialization of untrusted data turns into remote code execution, and the gadget chains that make it possible.