OWASP Foundation Courses

Outsmarting Smart Contracts - Security Vulnerabilities and Attack Vectors

Explore smart contract vulnerabilities, attack vectors, and security best practices in blockchain applications, with insights on responsible disclosure and real-world hacking incidents.

• YouTube
• 43 minutes
• On-Demand
• Free Video

Building a Security Culture - Digital Transformation and Breach Prevention

Explore strategies for creating a robust security culture amid digital transformation, addressing cloud risks, BYOD challenges, and persistent breaches despite technological investments.

• YouTube
• 46 minutes
• On-Demand
• Free Video

Building a Security Test Automation Framework

Learn best practices for building a security test automation framework using Docker, Kubernetes, and Defect Dojo. Discover how to manage vulnerabilities, prevent key sprawl, and implement security tooling in CI/CD pipelines.

• YouTube
• 53 minutes
• On-Demand
• Free Video

Serverless Security: Functions-as-a-Service (FaaS) - Challenges and Best Practices

Explore serverless security, focusing on Functions-as-a-Service (FaaS) benefits and challenges. Learn about attack surfaces, third-party libraries, secrets management, encryption, and best practices for secure serverless development.

• YouTube
• 34 minutes
• On-Demand
• Free Video

Automating TLS Configuration Verification for Web Application Data Stores

Explore best practices for TLS configuration in web application data stores, focusing on MySQL, PostgreSQL, and MongoDB. Learn about tools for verifying proper server setup and survey real-world implementations.

• YouTube
• 31 minutes
• On-Demand
• Free Video

The Bug Hunter's Methodology 2.0 - Advanced Web Application Security Testing

Explore cutting-edge techniques and tools for discovering vulnerabilities in web applications, including XSS, SSTI, SSRF, code injection, and more. Learn from expert Jason Haddix's updated methodology for effective penetration testing.

• YouTube
• 46 minutes
• On-Demand
• Free Video

Robots with Pentest Recipes - Automating Security Testing in DevOps

Explore automated security testing using Robot Framework to integrate tools like OWASP ZAP and Nmap. Learn to create easy-to-write test recipes for continuous delivery pipelines, enabling cross-team collaboration in application security.

• YouTube
• 40 minutes
• On-Demand
• Free Video

SSL Traffic Interception on Mobile Devices - Analysis and Protection

Análisis detallado de incidentes SSL en aplicaciones móviles, revelando patrones globales, casos notables y soluciones para desarrolladores contra la interceptación de tráfico.

• YouTube
• 52 minutes
• On-Demand
• Free Video

Android App Protection Techniques: Obfuscation, Packing, and Protection - APPSEC Cali 2018

Explore Android app protection techniques, including obfuscation, packing, and protection. Learn to analyze and counter these methods to identify potential malware and enhance app security.

• YouTube
• 37 minutes
• On-Demand
• Free Video

MarkDoom: How I Hacked Every Major IDE in 2 Weeks

Explore how major IDEs were hacked through embedded browsers, revealing critical security vulnerabilities in desktop applications built with web technologies. Learn about the risks and safeguards in the "Desktop Web" era.

• YouTube
• 40 minutes
• On-Demand
• Free Video

Decrease Your Stress and Increase Your Reach with AppSec Champions

Learn strategies to build a security-conscious culture and recruit AppSec champions within your organization, reducing stress and increasing the impact of your security efforts.

• YouTube
• 34 minutes
• On-Demand
• Free Video

Security After Death - Password Management and Secure Sharing

Explore practical solutions for secure password storage and sharing, including commercial and open-source options. Learn how to manage passwords effectively and plan for unexpected scenarios.

• YouTube
• 35 minutes
• On-Demand
• Free Video

The Path of DevOps Enlightenment for InfoSec

Explore the convergence of DevOps and Security, addressing industry challenges and providing insights for navigating the evolving landscape of information security.

• YouTube
• 39 minutes
• On-Demand
• Free Video

Fighting Advanced Threats at Their Software Roots - Scaling Software Security

Exploring strategies to scale software security beyond developers, addressing vulnerabilities at their roots, and transforming the software ecosystem to combat advanced threats effectively.

• YouTube
• 43 minutes
• On-Demand
• Free Video

Threat Modeling Panel - APPSEC Cali 2018

Expert panel discusses threat modeling techniques, challenges, and best practices in application security, featuring insights from industry leaders at major tech companies.

• YouTube
• 49 minutes
• On-Demand
• Free Video