OWASP Foundation Courses

Cloud Security at Scale and What it Means for Your Application

Explore Netflix's innovative cloud security strategies, including immutable servers, chaos engineering, and automated risk assessment tools, to enhance application security at scale.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

AutoScaling Web Application Security in the Cloud

Explore auto-scaling web application security in cloud environments, focusing on practical examples using AWS. Learn techniques, tools, and strategies for effective security implementation in rapidly scaling applications.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

Application Security Playbook for Business

Learn strategies for implementing robust application security, addressing challenges, and achieving desired outcomes in today's rapidly evolving digital landscape.

• YouTube
• 20 minutes
• Self-Paced
• Conference Talk

Flipping the Script on Application Security

Learn about GitHub's developer-first approach to application security, addressing common DevSecOps challenges and exploring innovative solutions like credential scanning and static analysis.

• YouTube
• 19 minutes
• Self-Paced
• Conference Talk

Temporal - Decoded - Leverage Cybersecurity as a Business Enabler

Discover how to transform cybersecurity from a cost center to a business enabler through strategic auditing, stakeholder engagement, and operational integration.

• YouTube
• 20 minutes
• Self-Paced
• Conference Talk

Struts 2 Must Die - The Life and Inevitable Death of Java’s Spaghettiest Framework

Explore Struts 2's evolution from modern framework to security liability. Dive into OGNL vulnerabilities, architectural flaws, and exploit techniques. Learn why Struts 2 persists in production and its potential for massive damage.

• YouTube
• 20 minutes
• Self-Paced
• Conference Talk

Testing Security the Right Way

Integrating QA into security testing: strategies for comprehensive SDLC security, including examples and templates for immediate implementation in development projects.

• YouTube
• 19 minutes
• Self-Paced
• Conference Talk

Pentesting Swift Application with OWASP iGoat

Learn iOS Swift app pentesting using OWASP iGoat, covering security loopholes, defense strategies, and real-world case studies. Gain skills for product security engineers and bug bounty hunters.

• YouTube
• 15 minutes
• Self-Paced
• Conference Talk

Knowing Is Half the Battle

Explore key legal and technical aspects of application security, addressing critical issues and lessons learned in this informative talk by Gregory Shapiro.

• YouTube
• 18 minutes
• Self-Paced
• Conference Talk

Creating a Buzz - Tales of Building WordPress Honeypots at Scale

Explore the world of WordPress honeypots, their deployment at scale, and surprising insights into black-hat tactics in this intriguing cybersecurity presentation.

• YouTube
• 18 minutes
• Self-Paced
• Conference Talk

Is Software Eating Security?

Explore the impact of software on security practices, transformation in architecture, and the importance of secure development and design in modern cybersecurity.

• YouTube
• 18 minutes
• Self-Paced
• Conference Talk

CSP Pitfalls and Gotchas

Explore common pitfalls and gotchas in Content Security Policy implementation, focusing on whitelist issues, SameOrigin policy, and unsafe inline practices. Learn strategies for building a robust security framework.

• YouTube
• 15 minutes
• Self-Paced
• Conference Talk

Hacking Management - Why Stop at Domain Admin?

Learn strategies for effective security change management, including organizational hacking, empathetic communication, and tactical execution to overcome resistance and improve information security programs.

• YouTube
• 19 minutes
• Self-Paced
• Conference Talk

Anatomy of a WebShell

Explore WebShell malware: types, design, usage, and detection methods. Learn to identify and protect against this stealthy, powerful attacker tool used for long-term network compromise.

• YouTube
• 19 minutes
• Self-Paced
• Conference Talk

Mantra OS - Because the World is Cruel

Explore Mantra OS's penetration testing tools for web application security, including DDoS, SQL injection, and man-in-the-middle attacks. Learn practical methodologies and risk mitigation strategies.

• YouTube
• 17 minutes
• Self-Paced
• Conference Talk