Course Catalog / Subject / owasp-asvs

owasp-asvs

View All Courses Download Course Catalog

LAB 324 ATT&CK: Exploiting Java Web Application Server Misconfiguration

EliteElective

LAB 323 ATT&CK: Exploiting Vulnerable Java Web Application Server Software

EliteElective

LAB 315 ATT&CK: Updating Vulnerable Java Web Application Server Software

EliteElective

LAB 244 – Defending Java Applications Against Security Misconfiguration

LAB 242 – Defending Node.js Applications Against eXternal XML Entity (XXE) Vulnerabilities

LAB 241 – Defending C# Applications Against eXternal XML Entity (XXE) Vulnerabilities

LAB 240 – Defending Java Applications Against eXternal XML Entity (XXE) Vulnerabilities

LAB 223 – Defending Node.js Applications Against SQL Injection

LAB 222 – Defending Python Applications Against SQL Injection

LAB 221 – Defending C# Applications Against SQL Injection

LAB 113 – Identifying Cryptographic Failures

LAB 330 ATT&CK: Exploiting Java SQL Injection to Extract Password Hashes

EliteElective

LAB 322 ATT&CK: Exploiting Windows File Sharing Server with External Remote Services

EliteElective

LAB 321 ATT&CK: Password Cracking

EliteElective

LAB 237 – Defending Java Applications Against SQL Injection

LAB 233 – Defending Node.js Applications Against XSS

LAB 232 – Defending C# Applications Against XSS

LAB 231 – Defending Python Applications Against XSS

LAB 230 – Defending Java Applications Against XSS

LAB 220 – Defending Against Hard-Coded Secrets

LAB 120 – Identifying XML Injection

LAB 119 – Identifying Persistent XSS

LAB 118 – Identifying Weak File Upload Validation

AdvancedElective

LAB 117 – Identifying Hidden Form Field

AdvancedElective

LAB 116 – Identifying Forceful Browsing

AdvancedElective

LAB 115 – Identifying Reflective XSS

LAB 114 – Identifying Cookie Tampering

AdvancedElective

LAB 110 – Identifying Sensitive Data Exposure Vulnerability Identification

LAB 109 – Identifying Security Misconfiguration Vulnerabilities

LAB 108 – Identifying Reverse Engineering Vulnerabilities

AdvancedElective

LAB 107 – Identifying Injection Vulnerabilities

LAB 106 – Identifying Cross-Site Scripting Vulnerabilities

LAB 105 – Identifying Credential Dumping: Vulnerability Identification

AdvancedElective

LAB 103 – Identifying Broken User Authentication Vulnerabilities

LAB 102 – Identifying Broken Object-Level Authorization Vulnerabilities

AdvancedElective

LAB 101 – Identifying Broken Access Control Vulnerabilities

SDT 325 – Testing for NULL Pointer Dereference

SDT 324 – Testing for Improper Restriction of Operations within the Bounds of a Memory Buffer

SDT 323 – Testing for Improper Input Validation

SDT 322 – Testing for Improper Privilege Management

SDT 321 – Testing for Uncontrolled Resource Consumption

SDT 320 – Testing for Out-of-bounds Write

SDT 319 – Testing for Out-of-bounds Read

SDT 318 – Testing for Insufficiently Protected Credentials

SDT 317 – Testing for Improper Control of Generation of Code

SDT 326 – Testing for Use After Free

TST 206 – ASVS Requirements for Developers