OWASP Foundation Courses

Exploiting CORS Misconfigurations for Bitcoins and Bounties

Explore CORS misconfigurations and their exploitation potential, including real-world examples of vulnerabilities in bitcoin exchanges and major websites. Learn about specification flaws and mitigation strategies.

• YouTube
• 46 minutes
• On-Demand
• Free Video

Automating API Penetration Testing Using Fuzzapi

Explore automated API penetration testing with fuzzapi, addressing common vulnerabilities in REST APIs. Learn to integrate security testing into development pipelines for early detection and mitigation.

• YouTube
• 46 minutes
• On-Demand
• Free Video

SPArring with the Security of Single Page Applications - MMA Hacker Training

Explore security challenges in Single Page Applications through an MMA analogy. Learn about SPA frameworks, REST APIs, WebSockets, and interconnectivity to become a "Mixed Multilayer Application Hacker".

• YouTube
• 56 minutes
• On-Demand
• Free Video

AppSec++ - Taking the Best of Agile, DevOps, and CI/CD into Your AppSec Program

Learn to optimize AppSec using Agile, DevOps, and CI/CD principles. Discover strategies for scaling security efforts, leveraging automation, and implementing open-source tools to enhance your application security program.

• YouTube
• 48 minutes
• On-Demand
• Free Video

Continuous Integration: Live Static Analysis Using Visual Studio and the Roslyn API

Explore live static analysis in Visual Studio using Roslyn API for secure coding. Learn to create custom rules, integrate secure code scanning, and enhance .NET application security.

• YouTube
• 54 minutes
• On-Demand
• Free Video

Barbarians at the Gateway - DDoS and Web Attacks Against Cloud Platforms

Explore DDoS and web attacks on cloud platforms, examining tools, methods, and attacker motivations. Learn to identify patterns for better protection against evolving cyber threats.

• YouTube
• 45 minutes
• On-Demand
• Free Video

How to Find the Next Great Deserialization CVE - AppSecUSA 2016

Explore deserialization attacks, learn to find and exploit vulnerabilities, and discover open-source protection methods. Gain insights into the challenges of traditional AppSec defenses against these threats.

• YouTube
• 35 minutes
• On-Demand
• Free Video

Attack Patterns for Black-Box Security Testing - AppSecEU 2016

Explore attack patterns for black-box security testing in web applications, focusing on methodologies and strategies to identify vulnerabilities effectively.

• YouTube
• 36 minutes
• On-Demand
• Free Video

Bugs Ruin Everything - Keynote on Vulnerability Analysis and Exploitation

Explore vulnerability analysis techniques, their strengths and weaknesses, and real-world case studies with security expert Charlie Miller in this engaging keynote from AppSecEU 2016.

• YouTube
• 53 minutes
• On-Demand
• Free Video

Storytelling Techniques for Application Security - Beyond Penetration Testing

Explore interview-based research and consultancy techniques for enhancing application security maturity, fostering security champions, and building quality-minded teams.

• YouTube
• 44 minutes
• On-Demand
• Free Video

From DTD to XXE - An Evaluation of XML Parsers

Comprehensive evaluation of XML parsers, exploring vulnerabilities from DTD to XXE attacks. Gain insights into secure XML parsing and learn to mitigate potential security risks.

• YouTube
• 42 minutes
• On-Demand
• Free Video

AppSec Awareness - A Blueprint for Security Culture Change

Discover strategies for building a sustainable security culture through AppSec awareness, focusing on human factors, knowledge sharing, and effective program architecture.

• YouTube
• 46 minutes
• On-Demand
• Free Video

From Facepalm to Brain Bender - Advanced Web Security Challenges

Explore web security challenges, from basic vulnerabilities to complex exploits, with insights from industry experts on detection, prevention, and mitigation strategies.

• YouTube
• 44 minutes
• On-Demand
• Free Video

Open Source Approaches to Security for Applications and Services - Mozilla Case Study

Explore open-source security approaches for applications and services, covering threat modeling, bug bounties, and measuring security effectiveness in Mozilla's ecosystem.

• YouTube
• 44 minutes
• On-Demand
• Free Video

Automated Mobile Application Security Assessment with MobSF - AppSec EU 2016

Discover automated mobile app security assessment using MobSF. Learn techniques for identifying vulnerabilities and enhancing protection in mobile applications.

• YouTube
• 45 minutes
• On-Demand
• Free Video