OWASP Foundation Courses

Quantifiable Quality - The New Standard of Secure Code

Explore innovative approaches to measure and enhance code security, focusing on quantifiable quality metrics for robust software development.

• YouTube
• 57 minutes
• Self-Paced
• Free Video

Becoming a Master in the Dojang with DefectDojo

Learn to master DefectDojo, an open-source vulnerability management tool. Enhance your security practices and streamline vulnerability tracking for improved application security.

• YouTube
• 59 minutes
• Self-Paced
• Free Video

Evolving Threat Modeling Through the Open Threat Model Format

Explore the Open Threat Model Format and its role in advancing threat modeling practices for improved cybersecurity risk assessment and mitigation strategies.

• YouTube
• 1 hour
• Self-Paced
• Free Video

The Hand That Feeds - How to Misuse Kubernetes

Explore Kubernetes vulnerabilities and misconfigurations, learning how to identify and mitigate security risks in containerized environments.

• YouTube
• 1 hour
• Self-Paced
• Free Video

Plain and Simple - The Art of Writing Clearly

Clear writing techniques for effective communication in technical and professional contexts.

• YouTube
• 54 minutes
• Self-Paced
• Free Video

Security as Code: A DevSecOps Approach

Explore DevSecOps principles and practices for integrating security into the software development lifecycle, emphasizing automation and collaboration for robust application security.

• YouTube
• 59 minutes
• Self-Paced
• Free Video

Reducing Software Vulnerability at a Global Scale

Explore strategies for reducing software vulnerabilities on a global scale, leveraging collective efforts of millions to enhance cybersecurity and protect digital ecosystems.

• YouTube
• 59 minutes
• Self-Paced
• Free Video

Defending Against New Phishing Attacks that Abuse OAuth Authorization Flows

Explore advanced techniques to protect against sophisticated phishing attacks exploiting OAuth authorization flows, enhancing your cybersecurity defenses.

• YouTube
• 1 hour
• Self-Paced
• Free Video

Making ASVS Truly Your Own

Explore strategies to customize and implement OWASP's Application Security Verification Standard (ASVS) effectively within your organization's unique security framework.

• YouTube
• 56 minutes
• Self-Paced
• Free Video

JavaScript Obfuscation: It's All About the Packers

Explore JavaScript obfuscation techniques, focusing on packers and their impact on code security and readability in this informative OWASP presentation.

• YouTube
• 47 minutes
• Self-Paced
• Free Video

Securing an API Ecosystem with OAuth 2.0

Explore OAuth 2.0 implementation for robust API security in this comprehensive talk by Philippe De Ryck, covering best practices and ecosystem protection strategies.

• YouTube
• 56 minutes
• Self-Paced
• Free Video

Everything You Wanted to Know About Client-Side CSRF But Were Afraid to Ask

Explore client-side CSRF vulnerabilities, detection challenges, and advanced analysis techniques using hybrid property graphs for improved web application security.

• YouTube
• 54 minutes
• Self-Paced
• Free Video

Docker for Pentesters

Learn essential Docker techniques for penetration testing, enhancing your cybersecurity skills and improving your ability to identify vulnerabilities in containerized environments.

• YouTube
• 38 minutes
• Self-Paced
• Free Video

Abusing Cloud Apps 101 - Command and Control

Explore techniques for exploiting cloud applications as command and control infrastructure, focusing on security vulnerabilities and defensive strategies.

• YouTube
• 53 minutes
• Self-Paced
• Free Video

Mobile Wanderlust - Our Journey to Version 2.0

Explore the evolution of mobile security testing with insights on OWASP's latest advancements and best practices for protecting mobile applications.

• YouTube
• 46 minutes
• Self-Paced
• Free Video