OWASP Foundation Courses

Do Certain Types of Developers or Teams Write More Secure Code?

Explore factors influencing secure code development, including team dynamics, developer experience, and human factors. Gain insights into improving software security practices.

• YouTube
• 43 minutes
• Self-Paced
• Free Video

ScriptProtect: Mitigating Unsafe Third-Party JavaScript Practices

Learn techniques to mitigate security risks associated with third-party JavaScript, enhancing web application safety and protecting against potential vulnerabilities.

• YouTube
• 39 minutes
• Self-Paced
• Free Video

How I Could Have Stolen Your Photos From Google

Uncover a critical security vulnerability in Google Photos and learn how it could have compromised user privacy. Gain insights into responsible disclosure and ethical hacking practices.

• YouTube
• 28 minutes
• Self-Paced
• Free Video

SUSTO: Systematic Universal Security Testing Orchestration

Explore systematic universal security testing orchestration for efficient vulnerability detection and management in software development lifecycles.

• YouTube
• 43 minutes
• Self-Paced
• Free Video

Five Key Trends in Application Security

Explore five crucial application security trends: cloud migration, CDN diversity, API proliferation, compliance challenges, and expanding attack surfaces. Gain insights into cybercriminal tactics and industry recommendations.

• YouTube
• 37 minutes
• Self-Paced
• Free Video

Threat Modeling Stories from the Trenches - Security Design Flaws and Solutions

Explore real-world threat modeling scenarios, design flaws, and security controls. Learn to identify vulnerabilities, understand attack vectors, and implement effective countermeasures in various systems.

• YouTube
• 47 minutes
• Self-Paced
• Free Video

Unlikely Allies: How HR Can Help Build a Security-First Culture

Learn strategies for HR and security teams to collaborate in fostering a security-conscious organizational culture, enhancing overall cybersecurity effectiveness.

• YouTube
• 44 minutes
• Self-Paced
• Free Video

OWASP Docker Top 10 Security Risks

Explore critical security risks in Docker environments and learn essential mitigation strategies to protect containerized applications from vulnerabilities.

• YouTube
• 50 minutes
• Self-Paced
• Free Video

Mobile-First Websites Security Evaluation - Attacker-Friendly or User-Friendly?

Evaluate security vulnerabilities in mobile-first websites, exploring potential risks and attacker-friendly features. Learn to identify and mitigate threats in mobile web development.

• YouTube
• 46 minutes
• Self-Paced
• Free Video

How to Learn and Teach Hacking

Explore hacking techniques, competitions, and effective teaching methods for cybersecurity skills. Learn problem-based approaches and gain insights into CTF challenges and binary exploitation.

• YouTube
• 45 minutes
• Self-Paced
• Free Video

HTTP Desync Attacks - Smashing Into The Cell Next Door

Explore HTTP desync attacks and their impact on web security, learning techniques to exploit vulnerabilities and breach neighboring systems.

• YouTube
• 45 minutes
• Self-Paced
• Free Video

How Scripting in ZAP Can Bridge the Gap Between Dev Teams and Security

Learn to bridge dev and security teams using ZAP scripting. Explore opportunities, overcome obstacles, and implement effective testing strategies for enhanced application security.

• YouTube
• 41 minutes
• Self-Paced
• Free Video

Exploiting Hardware Glitches and Side Channels in Perfect Software

Uncover vulnerabilities in flawless software through hardware glitches and side-channel attacks. Learn advanced exploitation techniques for enhancing cybersecurity defenses.

• YouTube
• 51 minutes
• Self-Paced
• Free Video

Attacking AWS: The Full Cyber Kill Chain

Comprehensive exploration of AWS vulnerabilities and attack strategies, covering the entire cyber kill chain for enhanced cloud security awareness.

• YouTube
• 46 minutes
• Self-Paced
• Free Video

Knative Security Pipelines

Explore Knative security pipelines with expert insights on enhancing cloud-native application security, deployment strategies, and best practices for robust containerized environments.

• YouTube
• 43 minutes
• Self-Paced
• Free Video