Course Catalog / Subject / owasp-asvs

owasp-asvs

View All Courses Download Course Catalog

COD 288 – Java Public Key Cryptography

LAB 103 – Identifying Broken User Authentication Vulnerabilities

LAB 113 – Identifying Cryptographic Failures

LAB 114 – Identifying Cookie Tampering

LAB 115 – Identifying Reflective XSS

LAB 116 – Identifying Forceful Browsing

LAB 117 – Identifying Hidden Form Field

LAB 118 – Identifying Weak File Upload Validation

LAB 119 – Identifying Persistent XSS

LAB 120 – Identifying XML Injection

LAB 220 – Defending Against Hard-Coded Secrets

LAB 221 – Defending C# Applications Against SQL Injection

LAB 222 – Defending Python Applications Against SQL Injection

LAB 223 – Defending Node.js Applications Against SQL Injection

LAB 230 – Defending Java Applications Against XSS

LAB 231 – Defending Python Applications Against XSS

LAB 232 – Defending C# Applications Against XSS

LAB 233 – Defending Node.js Applications Against XSS

LAB 237 – Defending Java Applications Against SQL Injection

LAB 240 – Defending Java Applications Against eXternal XML Entity (XXE) Vulnerabilities

LAB 241 – Defending C# Applications Against eXternal XML Entity (XXE) Vulnerabilities

LAB 242 – Defending Node.js Applications Against eXternal XML Entity (XXE) Vulnerabilities

LAB 244 – Defending Java Applications Against Security Misconfiguration

LAB 315 – ATT&CK: Updating Vulnerable Java Web Application Server Software

LAB 321 – ATT&CK: Password Cracking

LAB 322 – ATT&CK: Exploiting Windows File Sharing Server with External Remote Services

LAB 323 – ATT&CK: Exploiting Vulnerable Java Web Application Server Software

LAB 324 – ATT&CK: Exploiting Java Web Application Server Misconfiguration

LAB 330 – ATT&CK: Exploiting Java SQL Injection to Extract Password Hashes

SDT 317 – Testing for Improper Control of Generation of Code

SDT 318 – Testing for Insufficiently Protected Credentials

SDT 319 – Testing for Out-of-bounds Read

SDT 320 – Testing for Out-of-bounds Write

SDT 321 – Testing for Uncontrolled Resource Consumption

SDT 322 – Testing for Improper Privilege Management

SDT 323 – Testing for Improper Input Validation

SDT 324 – Testing for Improper Restriction of Operations within the Bounds of a Memory Buffer

SDT 325 – Testing for NULL Pointer Dereference

SDT 326 – Testing for Use After Free

TST 206 – ASVS Requirements for Developers