Learn to find and fix web vulnerabilities. This pathway combines short explanations with hands-on lab exercises you can run on your own machine.
What you will learn
- Module 1 — How the web works: HTTP, cookies, sessions
- Module 2 — The OWASP Top 10
- Module 3 — Injection: SQL, command, template
- Module 4 — Cross-site scripting
- Module 5 — Authentication and session flaws
- Module 6 — Access control and IDOR
- Module 7 — SSRF and file upload issues
- Module 8 — Security headers and CSP
- Module 9 — Testing with Burp Suite
- Module 10 — Secure code review basics
Before you start
Set up an isolated lab (a virtual machine or a free practice platform). Only test systems you own or have explicit written permission to assess.