Course Catalog / Subject / owasp-asvs

owasp-asvs

View All Courses Download Course Catalog

LAB 324 ATT&CK: Exploiting Java Web Application Server Misconfiguration (NEW)

LAB 323 ATT&CK: Exploiting Vulnerable Java Web Application Server Software (NEW)

LAB 315 ATT&CK: Updating Vulnerable Java Web Application Server Software (NEW)

LAB 244 Defending Java Applications Against Security Misconfiguration (NEW)

LAB 242 Defending Node.js Applications Against eXternal XML Entity (XXE) Vulnerabilities (NEW)

LAB 241 Defending C# Applications Against eXternal XML Entity (XXE) Vulnerabilities (NEW)

LAB 240 Defending Java Applications Against eXternal XML Entity (XXE) Vulnerabilities (NEW)

LAB 223 Defending Node.js Applications Against SQL Injection (NEW)

LAB 222 Defending Python Applications Against SQL Injection (NEW)

LAB 221 Defending C# Applications Against SQL Injection (NEW)

LAB 113 Identifying Cryptographic Failures (NEW)

LAB 330 ATT&CK: Exploiting Java SQL Injection to Extract Password Hashes (NEW)

LAB 322 ATT&CK: Exploiting Windows File Sharing Server with External Remote Services (NEW)

LAB 321 ATT&CK: Password Cracking (NEW)

LAB 237 Defending Java Applications Against SQL Injection (NEW)

LAB 233 Defending Node.js Applications Against XSS (NEW)

LAB 232 Defending C# Applications Against XSS (NEW)

LAB 231 Defending Python Applications Against XSS (NEW)

LAB 230 Defending Java Applications Against XSS (NEW)

LAB 220 Defending Against Hard-Coded Secrets (NEW)

LAB 120 Identifying XML Injection (NEW)

LAB 119 Identifying Persistent XSS (NEW)

LAB 118 Identifying Weak File Upload Validation (NEW)

LAB 117 Identifying Hidden Form Field (NEW)

LAB 116 Identifying Forceful Browsing (NEW)

LAB 115 Identifying Reflective XSS (NEW)

LAB 114 Identifying Cookie Tampering (NEW)

LAB 110 – Identifying Sensitive Data Exposure Vulnerability Identification

LAB 109 – Identifying Security Misconfiguration Vulnerabilities

LAB 108 – Identifying Reverse Engineering Vulnerabilities

LAB 107 – Identifying Injection Vulnerabilities

LAB 106 – Identifying Cross-Site Scripting Vulnerabilities

LAB 105 – Identifying Credential Dumping: Vulnerability Identification

LAB 103 – Identifying Broken User Authentication Vulnerabilities

LAB 102 – Identifying Broken Object-Level Authorization Vulnerabilities

LAB 101 – Identifying Broken Access Control Vulnerabilities

SDT 325 – Testing for NULL Pointer Dereference

SDT 324 – Testing for Improper Restriction of Operations within the Bounds of a Memory Buffer

SDT 323 – Testing for Improper Input Validation

SDT 322 – Testing for Improper Privilege Management

SDT 321 – Testing for Uncontrolled Resource Consumption

SDT 320 – Testing for Out-of-bounds Write

SDT 319 – Testing for Out-of-bounds Read

SDT 318 – Testing for Insufficiently Protected Credentials

SDT 317 – Testing for Improper Control of Generation of Code

SDT 326 – Testing for Use After Free

TST 206 – ASVS Requirements for Developers