OWASP Foundation Courses

Is Software Eating Security?

Explore the impact of software on security practices, transformation in architecture, and the importance of secure development and design in modern cybersecurity.

• YouTube
• 18 minutes
• Self-Paced
• Conference Talk

CSP Pitfalls and Gotchas

Explore common pitfalls and gotchas in Content Security Policy implementation, focusing on whitelist issues, SameOrigin policy, and unsafe inline practices. Learn strategies for building a robust security framework.

• YouTube
• 15 minutes
• Self-Paced
• Conference Talk

Hacking Management - Why Stop at Domain Admin?

Learn strategies for effective security change management, including organizational hacking, empathetic communication, and tactical execution to overcome resistance and improve information security programs.

• YouTube
• 19 minutes
• Self-Paced
• Conference Talk

Anatomy of a WebShell

Explore WebShell malware: types, design, usage, and detection methods. Learn to identify and protect against this stealthy, powerful attacker tool used for long-term network compromise.

• YouTube
• 19 minutes
• Self-Paced
• Conference Talk

Mantra OS - Because the World is Cruel

Explore Mantra OS's penetration testing tools for web application security, including DDoS, SQL injection, and man-in-the-middle attacks. Learn practical methodologies and risk mitigation strategies.

• YouTube
• 17 minutes
• Self-Paced
• Conference Talk

Detecting and Defending Against State-Actor Surveillance

Explore state-sponsored surveillance techniques and learn effective detection and defense strategies against high-tech spying methods used by well-funded agencies.

• YouTube
• 18 minutes
• Self-Paced
• Conference Talk

Mobile Security Session

Explore mobile security risks, developmental controls, and industry best practices to build and maintain secure mobile applications with expert Jason Haddix.

• YouTube
• 17 minutes
• Self-Paced
• Conference Talk

Catching Transparent Phish - Understanding and Detecting MITM Phishing Kits

Explore MITM phishing toolkits, their threat models, and detection methods. Learn about network-level analysis, classifiers, and countermeasures to enhance cybersecurity defenses.

• YouTube
• 58 minutes
• Self-Paced
• Conference Talk

A Wander Through the World of Container Security

Explore container security, from Docker to Kubernetes, covering breakout vulnerabilities, networking challenges, and RBAC. Gain insights into potential threats and future attack vectors in containerized environments.

• YouTube
• 52 minutes
• Self-Paced
• Conference Talk

Web Developers, Beware of the Tarpits for SAST in Your Code

Explore SAST testability patterns, their impact on code security, and strategies for improving vulnerability detection in web development.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

OWASP Flagship Projects - OWASP Dependency-Check

Learn to identify and mitigate vulnerabilities in software dependencies using OWASP Dependency-Check, enhancing application security through effective composition analysis.

• YouTube
• 29 minutes
• Self-Paced
• Conference Talk

OWASP Flagship Projects - OWASP DefectDojo

Learn about OWASP DefectDojo, an open-source application security management tool. Explore its features, automation capabilities, deployment options, and community-driven development.

• YouTube
• 29 minutes
• Self-Paced
• Conference Talk

OWASP Flagship Projects - OWASP Juice Shop

Explore OWASP Juice Shop, a vulnerable web application for security training. Learn about challenges, cross-site scripting, coding exercises, and future enhancements in this comprehensive overview.

• YouTube
• 24 minutes
• Self-Paced
• Conference Talk

OWASP Cloud-Native Application Security Top 10 Flagship Project

Explore key security challenges and best practices for cloud-native applications, focusing on OWASP's top 10 vulnerabilities and mitigation strategies.

• YouTube
• 21 minutes
• Self-Paced
• Conference Talk

OWASP Flagship Projects - OWASP Amass

Explore OWASP Amass, a powerful tool for information gathering and external asset discovery in cybersecurity. Learn its features, data sources, and future developments.

• YouTube
• 29 minutes
• Self-Paced
• Conference Talk