Module
Web Application Vulnerabilities
Sign in to add this module to your path and practice.
About
OWASP Top 10 focus: injection (SQLi, command), XSS, CSRF, SSRF, insecure deserialization, security misconfiguration, broken authn/authz. Same-origin policy and browser security model basics.
Goal
Given vulnerable code or a simple app, identify at least five distinct vulnerability classes, craft conceptual exploits, and specify fixes (parameterized queries, CSP, CSRF tokens, output encoding, etc.).
Unlocks
Tutor
Ask questions about this module.
Hi — I'm your tutor for Web Application Vulnerabilities. Ask about the concepts, goal, or where you're stuck.