Learn
LoginRegister

Path 07 · 27 rooms · 0 live

Web Application Security

OWASP Top 10 and common web attack vs defense patterns.

  1. 109OWASP Top 10 OverviewRoom mapped — interactive engine coming in a later batchPlanned
  2. 110SQL InjectionPreview
  3. 111Blind SQL InjectionRoom mapped — interactive engine coming in a later batchPlanned
  4. 112Cross-Site Scripting (XSS)Preview
  5. 113Reflected XSSRoom mapped — interactive engine coming in a later batchPlanned
  6. 114Stored XSSRoom mapped — interactive engine coming in a later batchPlanned
  7. 115DOM-Based XSSRoom mapped — interactive engine coming in a later batchPlanned
  8. 116Cross-Site Request ForgeryRoom mapped — interactive engine coming in a later batchPlanned
  9. 117Server-Side Request ForgeryRoom mapped — interactive engine coming in a later batchPlanned
  10. 118XML External Entity (XXE)Room mapped — interactive engine coming in a later batchPlanned
  11. 119Path TraversalRoom mapped — interactive engine coming in a later batchPlanned
  12. 120File Upload VulnerabilitiesRoom mapped — interactive engine coming in a later batchPlanned
  13. 121Broken Access ControlRoom mapped — interactive engine coming in a later batchPlanned
  14. 122IDOR / BOLARoom mapped — interactive engine coming in a later batchPlanned
  15. 123Authentication VulnerabilitiesRoom mapped — interactive engine coming in a later batchPlanned
  16. 124Session HijackingRoom mapped — interactive engine coming in a later batchPlanned
  17. 125Session FixationRoom mapped — interactive engine coming in a later batchPlanned
  18. 126Security MisconfigurationRoom mapped — interactive engine coming in a later batchPlanned
  19. 127Insecure DeserializationRoom mapped — interactive engine coming in a later batchPlanned
  20. 128Command InjectionRoom mapped — interactive engine coming in a later batchPlanned
  21. 129Race ConditionsRoom mapped — interactive engine coming in a later batchPlanned
  22. 130Business Logic VulnerabilitiesRoom mapped — interactive engine coming in a later batchPlanned
  23. 131ClickjackingRoom mapped — interactive engine coming in a later batchPlanned
  24. 132Open RedirectsRoom mapped — interactive engine coming in a later batchPlanned
  25. 133Security HeadersRoom mapped — interactive engine coming in a later batchPlanned
  26. 134Input Validation & Output EncodingRoom mapped — interactive engine coming in a later batchPlanned
  27. 135Secure Coding – Attack vs DefenseRoom mapped — interactive engine coming in a later batchPlanned
← All paths← Previous pathNext path →