OWASP Foundation Courses

Creating a Buzz - Tales of Building WordPress Honeypots at Scale

Explore the world of WordPress honeypots, their deployment at scale, and surprising insights into black-hat tactics in this intriguing cybersecurity presentation.

• YouTube
• 18 minutes
• Self-Paced
• Conference Talk

Is Software Eating Security?

Explore the impact of software on security practices, transformation in architecture, and the importance of secure development and design in modern cybersecurity.

• YouTube
• 18 minutes
• Self-Paced
• Conference Talk

CSP Pitfalls and Gotchas

Explore common pitfalls and gotchas in Content Security Policy implementation, focusing on whitelist issues, SameOrigin policy, and unsafe inline practices. Learn strategies for building a robust security framework.

• YouTube
• 15 minutes
• Self-Paced
• Conference Talk

Hacking Management - Why Stop at Domain Admin?

Learn strategies for effective security change management, including organizational hacking, empathetic communication, and tactical execution to overcome resistance and improve information security programs.

• YouTube
• 19 minutes
• Self-Paced
• Conference Talk

Anatomy of a WebShell

Explore WebShell malware: types, design, usage, and detection methods. Learn to identify and protect against this stealthy, powerful attacker tool used for long-term network compromise.

• YouTube
• 19 minutes
• Self-Paced
• Conference Talk

Mantra OS - Because the World is Cruel

Explore Mantra OS's penetration testing tools for web application security, including DDoS, SQL injection, and man-in-the-middle attacks. Learn practical methodologies and risk mitigation strategies.

• YouTube
• 17 minutes
• Self-Paced
• Conference Talk

Detecting and Defending Against State-Actor Surveillance

Explore state-sponsored surveillance techniques and learn effective detection and defense strategies against high-tech spying methods used by well-funded agencies.

• YouTube
• 18 minutes
• Self-Paced
• Conference Talk

Mobile Security Session

Explore mobile security risks, developmental controls, and industry best practices to build and maintain secure mobile applications with expert Jason Haddix.

• YouTube
• 17 minutes
• Self-Paced
• Conference Talk

Securing the Future: Challenges and Innovations in Application Security

Insightful keynote address exploring cutting-edge application security trends, challenges, and best practices in the rapidly evolving digital landscape.

• YouTube
• 52 minutes
• Self-Paced
• Free Video

Opening Remarks and Keynote on Application Security - 2022 Global AppSec San Francisco

Explore cybersecurity insights and industry trends with opening remarks and a keynote address by Anna Westelius at the 2022 Global AppSec San Francisco conference.

• YouTube
• 42 minutes
• Self-Paced
• Free Video

Application Security Best Practices - 2022 Global AppSec Keynote

Explore cutting-edge application security insights and strategies with industry expert Jim Manico in this thought-provoking keynote address from the 2022 Global AppSec conference.

• YouTube
• 1 hour 4 minutes
• Self-Paced
• Free Video

Cybersecurity Trends and Challenges - 2022 Global AppSec Keynote

Explore cutting-edge application security insights and trends with Simon Bennetts' keynote address at the 2022 Global AppSec conference in San Francisco.

• YouTube
• 1 hour 2 minutes
• Self-Paced
• Free Video

Squeezing the Last Drop Out of OWASP Juice Shop

Explore advanced hacking techniques and security challenges in this hands-on session with OWASP Juice Shop, led by its creator Bjoern Kimminich.

• YouTube
• 58 minutes
• Self-Paced
• Free Video

A Taste of Privacy Threat Modeling

Explore privacy threat modeling techniques to enhance application security and protect user data in this insightful presentation by Kim Wuyts.

• YouTube
• 51 minutes
• Self-Paced
• Free Video

Introducing Threat Modeling to Established Teams

Learn effective strategies for implementing threat modeling in established teams, enhancing security practices and fostering a proactive approach to identifying potential vulnerabilities.

• YouTube
• 57 minutes
• Self-Paced
• Free Video