OWASP Foundation Courses

Forensic Investigations of Web Exploitations

1 review

Explore network forensics techniques and open-source tools for investigating web server compromises, analyzing captured traffic, and reconstructing malicious sessions to uncover digital evidence.

• YouTube
• 53 minutes
• On-Demand
• Free Video

Breaches Are Everywhere - What's a Good Security Leader to Do

1 review

Explore effective strategies for security leaders to combat widespread breaches, covering policies, monitoring, patching, and disaster recovery in today's threat landscape.

• YouTube
• 28 minutes
• On-Demand
• Free Video

The Road to Free Certificates is Paved with Good Intentions

1 review

Exploring the journey towards free SSL/TLS certificates, this talk discusses the challenges, intentions, and implications of widespread HTTPS adoption for web security and privacy.

• YouTube
• 49 minutes
• On-Demand
• Free Video

Modern Application Security vs. GenAI Applications: Is Your AppSec Ready?

1 review

Explore the intersection of modern application security and generative AI, assessing readiness for emerging challenges in the evolving tech landscape.

• YouTube
• 47 minutes
• On-Demand
• Free Video

Mobile Security Track - AppSec Europe 2014

1 review

Explore cutting-edge mobile security topics at AppSecEU 2014, covering iOS and Android vulnerabilities, OWASP Mobile Top Ten, smart storage scanning, and practical defense strategies for app developers.

• YouTube
• 6 hours 26 minutes
• On-Demand
• Free Video

Catching Transparent Phish - Understanding and Detecting MITM Phishing Kits

Explore MITM phishing toolkits, their threat models, and detection methods. Learn about network-level analysis, classifiers, and countermeasures to enhance cybersecurity defenses.

• YouTube
• 58 minutes
• On-Demand
• Conference Talk

A Wander Through the World of Container Security

Explore container security, from Docker to Kubernetes, covering breakout vulnerabilities, networking challenges, and RBAC. Gain insights into potential threats and future attack vectors in containerized environments.

• YouTube
• 52 minutes
• On-Demand
• Conference Talk

Web Developers, Beware of the Tarpits for SAST in Your Code

Explore SAST testability patterns, their impact on code security, and strategies for improving vulnerability detection in web development.

• YouTube
• 47 minutes
• On-Demand
• Conference Talk

OWASP Flagship Projects - OWASP Dependency-Check

Learn to identify and mitigate vulnerabilities in software dependencies using OWASP Dependency-Check, enhancing application security through effective composition analysis.

• YouTube
• 29 minutes
• On-Demand
• Conference Talk

OWASP Flagship Projects - OWASP DefectDojo

Learn about OWASP DefectDojo, an open-source application security management tool. Explore its features, automation capabilities, deployment options, and community-driven development.

• YouTube
• 29 minutes
• On-Demand
• Conference Talk

OWASP Flagship Projects - OWASP Juice Shop

Explore OWASP Juice Shop, a vulnerable web application for security training. Learn about challenges, cross-site scripting, coding exercises, and future enhancements in this comprehensive overview.

• YouTube
• 24 minutes
• On-Demand
• Conference Talk

OWASP Cloud-Native Application Security Top 10 Flagship Project

Explore key security challenges and best practices for cloud-native applications, focusing on OWASP's top 10 vulnerabilities and mitigation strategies.

• YouTube
• 21 minutes
• On-Demand
• Conference Talk

OWASP Flagship Projects - OWASP Amass

Explore OWASP Amass, a powerful tool for information gathering and external asset discovery in cybersecurity. Learn its features, data sources, and future developments.

• YouTube
• 29 minutes
• On-Demand
• Conference Talk

OWASP Flagship Projects - OWASP Security Knowledge Framework

Explore the OWASP Security Knowledge Framework, its features, and security lifecycle. Learn about OSS projects, demo labs, and expert wizards for enhancing application security.

• YouTube
• 26 minutes
• On-Demand
• Conference Talk

OWASP Flagship Projects - OWASP ModSecurity Core Rule Set

Explore OWASP ModSecurity Core Rule Set: web application firewall rules, paranoia levels, and project developments for enhanced security and threat protection.

• YouTube
• 29 minutes
• On-Demand
• Conference Talk