OWASP Foundation Courses

OWASP DefectDojo Project

Explore DefectDojo, an open-source vulnerability management tool. Learn its features, implementation, and how it streamlines security testing workflows for development teams.

• YouTube
• 30 minutes
• Self-Paced
• Free Video

OWASP Bug Logging Tool Project

Learn about OWASP's Bug Logging Tool, covering categories like security, functionality, and performance. Explore features such as leaderboards, contests, and payment integration for effective bug management.

• YouTube
• 38 minutes
• Self-Paced
• Free Video

OWASP Web Honeypot Project

Explore web application security through honeypot technology. Learn deployment strategies, data analysis, and threat intelligence gathering to enhance your cybersecurity defenses.

• YouTube
• 26 minutes
• Self-Paced
• Free Video

Helpful Hackers - Keynote by Astrid Oosenbrug

Explore the world of ethical hacking and its positive impact on cybersecurity with insights from Astrid Oosenbrug's keynote address on helpful hackers.

• YouTube
• 51 minutes
• Self-Paced
• Free Video

Cloud Attack Surface Management

Explore cloud security challenges and strategies for effective attack surface management in this insightful keynote by Alex Shulman Peleg.

• YouTube
• 58 minutes
• Self-Paced
• Free Video

15 Years of OWASP Top 10 - Has the Cloud Made a Difference?

Explore the evolution of web application security over 15 years, examining the impact of cloud computing on OWASP Top 10 vulnerabilities and current cybersecurity challenges.

• YouTube
• 50 minutes
• Self-Paced
• Free Video

Insider Threats and New Economy Industries

Explore insider threats in emerging industries, examining vulnerabilities and strategies to mitigate risks in the evolving economic landscape.

• YouTube
• 54 minutes
• Self-Paced
• Free Video

Automate Security - Lessons Learned from Successful Security Automation Programs

Learn key strategies for successful security automation, increasing team efficiency, and engaging external teams. Gain insights from real-world examples to kickstart your automation journey and achieve rapid results.

• YouTube
• 27 minutes
• Self-Paced
• Free Video

Keynote: Request Forgery on the Web - SSRF, CSRF and Clickjacking

Comprehensive exploration of web request forgery attacks and defenses, covering CSRF, SSRF, and clickjacking. Provides practical strategies for developers to secure web applications against these vulnerabilities.

• YouTube
• 47 minutes
• Self-Paced
• Free Video

We Deserve Rights - Advocating for Ethical Hackers' Legal Protection

Exploring the misconceptions about hackers, this talk advocates for legal protection and public awareness to support ethical hacking, emphasizing its crucial role in cybersecurity and societal safety.

• YouTube
• 36 minutes
• Self-Paced
• Free Video

Data as a New Security Boundary - Cryptography and Supporting Controls

Explore data security through cryptography as a boundary, covering end-to-end encryption, application-level protection, and supporting controls for real-world implementation across various contexts.

• YouTube
• 51 minutes
• Self-Paced
• Free Video

Azure Vulnerability Testbed (AzGOAT) - Understanding and Hardening Azure Security

Explore Azure security vulnerabilities and defenses with AzGOAT, a lab environment for understanding attack surfaces, designing secure solutions, and minimizing threats in Azure environments.

• YouTube
• 47 minutes
• Self-Paced
• Free Video

Pwning IoT Devices Through Their Applications - From AppSec to IoT Security

Explore IoT device vulnerabilities through application security techniques, from firmware analysis to code review, leading to six new CVEs and insights on responsible disclosure.

• YouTube
• 45 minutes
• Self-Paced
• Free Video

Exploiting Web Messaging Implementations

Uncover vulnerabilities in cross-document messaging, learn common developer mistakes, and explore open-source tools for identifying post messaging security issues in web applications.

• YouTube
• 58 minutes
• Self-Paced
• Free Video

Insiders Guide to Mobile AppSec with Latest OWASP MASVS

Explore mobile app security with OWASP MASVS, covering data storage, network calls, authentication, coding, and reverse engineering. Gain insights from real-world experience and latest tools for effective mobile pentesting.

• YouTube
• 29 minutes
• Self-Paced
• Free Video