Lazo Lab Sign up

All courses

Intermediate · 27 lessons · 4 units

Web Security

How websites get attacked and, more importantly, how to build them so they don't.

Start course

Unit 1Thinking like a defender

0/5
  1. 1 The OWASP Top 10 quiz
  2. 2 Never trust input quiz
  3. 3 Authentication vs authorisation quiz
  4. 4 Broken access control codequiz
  5. 5 Security misconfiguration quiz

Unit 2Injection

0/7
  1. 6 What injection is quiz
  2. 7 SQL injection codequiz
  3. 8 Command injection codequiz
  4. 9 Cross-site scripting (XSS) quiz
  5. 10 Content Security Policy codequiz
  6. 11 Path traversal quiz
  7. 12 Server-side request forgery (SSRF) quiz

Unit 3Sessions and logins

0/7
  1. 13 Cookies codequiz
  2. 14 CSRF codequiz
  3. 15 Storing passwords codequiz
  4. 16 Rate limiting quiz
  5. 17 Multi-factor for your users quiz
  6. 18 Account enumeration quiz
  7. 19 Password reset flows quiz

Unit 4Building secure apps

0/8
  1. 20 Security headers quiz
  2. 21 Clickjacking quiz
  3. 22 Dependencies and supply chain codequiz
  4. 23 Secrets management quiz
  5. 24 Logging and monitoring quiz
  6. 25 Bug bounties and responsible disclosure quiz
  7. 26 Practice labs quiz
  8. 27 Secure code review quiz