OverviewStart here2 min
Hacking Web Applications
Find flaws in web apps, led by the OWASP Top 10.
About this module
Web applications are where most real attacks happen, and the OWASP Top 10 is the map. This focused build covers the eight topics that matter most: web app architecture, the OWASP Top 10, broken access control, injection (SQLi & command), XSS, authentication failures, the hacking methodology, and how it is tested and defended.
What you will learn
- Web Application Architecture
- OWASP Top 10 Overview
- Broken Access Control (A01)
- Injection — SQLi & Command (A03)
- Cross-Site Scripting (XSS)
- Authentication & Session Failures (A07)
- Web App Hacking Methodology
- Security Testing, Tools & Defenses
Module roadmap
01Web Application ArchitectureLesson 1 · ~5 min
02OWASP Top 10 OverviewLesson 2 · ~5 min
03Broken Access Control (A01)Lesson 3 · ~4 min
04Injection — SQLi & Command (A03)Lesson 4 · ~5 min
05Cross-Site Scripting (XSS)Lesson 5 · ~5 min
06Authentication & Session Failures (A07)Lesson 6 · ~4 min
07Web App Hacking MethodologyLesson 7 · ~5 min
08Security Testing, Tools & DefensesLesson 8 · ~5 min
09Lab: Attack a Vulnerable Web App (DVWA)Lab · ~40 min
10AssessmentAssessment · ~5 min
How to study: read each lesson in order, do the lab, then take the practice test and aim for 80%+.