OWASP Foundation Courses

Hacking Web Server Apps for iOS - Security Risks and Vulnerabilities

Explore iOS web server app vulnerabilities, from XSS to potential RCE. Learn risks, attack vectors, and implications for both jailbroken and non-jailbroken devices in this eye-opening security analysis.

• YouTube
• 31 minutes
• Self-Paced
• Free Video

Insecure Expectations - Testing for Common Security Issues in Rails Applications

Explore hands-on examples of security testing in Rails, learn about common vulnerabilities, and discover a new open-source tool for simplified security test writing. Gain practical skills to enhance your application's security.

• YouTube
• 46 minutes
• Self-Paced
• Free Video

Verifying Software for Security Bugs - Dynamic Analysis and Fuzzing Testing

Learn dynamic analysis and fuzzing techniques to verify software security, including mitigations and vulnerability checks. Explore BinSecSweeper, an open-source tool for binary analysis on Windows and Linux.

• YouTube
• 50 minutes
• Self-Paced
• Free Video

PiOSoned POS - A Case Study in iOS-Based Mobile Point-of-Sale Security Flaws

Explore security vulnerabilities in iOS-based mobile point-of-sale systems, including coding mistakes, platform misunderstandings, and hardware weaknesses. Learn best practices for securing mobile POS applications.

• YouTube
• 40 minutes
• Self-Paced
• Free Video

The 2013 OWASP Top 10 - Understanding Web Application Security Risks

Comprehensive overview of OWASP Top 10 2013, covering changes, risks, and mitigation strategies for web application security. Essential for developers and security professionals.

• YouTube
• 49 minutes
• Self-Paced
• Free Video

Thinking Differently About Security - What Could Possibly Go Wrong?

Explore innovative security perspectives, blending technical expertise with insights from economics and military history to effectively communicate and address cybersecurity challenges.

• YouTube
• 51 minutes
• Self-Paced
• Free Video

HTML5 - Security Risks and Tools in Modern Web Applications

Explore HTML5's security implications, from potential risks to innovative tools for enhanced authentication and session tracking. Learn how new features impact web application security.

• YouTube
• 51 minutes
• Self-Paced
• Free Video

Tagging Your Code with a Useful Assurance Label

Learn to focus software vulnerability assessments on critical weaknesses across the development lifecycle, and create an "assurance tag" for binaries to enhance security efforts.

• YouTube
• 31 minutes
• Self-Paced
• Free Video

Making the Future Secure with Java

Explore Oracle's progress on Java platform security and future plans. Learn about evolving threats and strategies to enhance Java's security in an increasingly sophisticated attack landscape.

• YouTube
• 50 minutes
• Self-Paced
• Free Video

Why is SCADA Security an Uphill Battle

Explore SCADA security challenges, attacks, and protective measures. Learn about SCADA components, protocols, and real-world implementations. Gain insights for securing critical infrastructure and control systems.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

Wait Wait... Don't Tell Me Software Security - Panel Discussion

Panel discussion testing AppSec knowledge with industry experts through engaging quiz-style segments. Covers current security news, trends, and challenges in an entertaining format.

• YouTube
• 42 minutes
• Self-Paced
• Free Video

OWASP Periodic Table of Vulnerabilities

Explore a new approach to web security using the OWASP Periodic Table of Elements, focusing on eliminating vulnerabilities through perimeter technologies and application frameworks.

• YouTube
• 49 minutes
• Self-Paced
• Free Video

OWASP Hackademic - Teaching Application Security Through Practical Challenges

Practical environment for teaching application security through realistic scenarios with known vulnerabilities. Students discover and exploit vulnerabilities, gaining hands-on experience from an attacker's perspective.

• YouTube
• 37 minutes
• Self-Paced
• Free Video

XML External Entities Attacks - Advanced Exploitation Techniques

Explore advanced techniques for exploiting XML external entities vulnerabilities, including novel approaches for data theft, internal service manipulation, and denial of service attacks.

• YouTube
• 39 minutes
• Self-Paced
• Free Video

BASHing iOS Applications - Command Line Tools for Mobile Auditors

Explore iOS application assessment using command-line tools. Learn mobile security fundamentals, binary analysis, data storage, and endpoint parsing while addressing OWASP Mobile Top 10 vulnerabilities.

• YouTube
• 47 minutes
• Self-Paced
• Free Video