Recommended Path (Hands-On Only): AppSec Professional

HackEDU: Foundational | AppSec Professional

Learn the foundational principles of application security utlizing secure coding and operational security.

Hands-On Only | Total Learning Path Duration: 6 hours 0 minutes

ClickJacking (HackEDU)

Encoding (HackEDU)

Hashing (HackEDU)

Encryption (HackEDU)

Zip Slip (HackEDU)

Threat Modeling (HackEDU)

Security Unit Tests (HackEDU)

Broken Access Control (HackEDU)

Cross-Site Request Forgery (CSRF) (HackEDU)

Cryptographic Failures (HackEDU)

Secure Password Storage: Part 1 (HackEDU)

Secure Password Storage: Part 2 (HackEDU)

Secure Password Storage: Part 3 (HackEDU)

SQL Injection: Part 1 (HackEDU)

SQL Injection: Part 2 (HackEDU)

SQL Injection: Part 3 (HackEDU)

Reflected Cross-Site Scripting (XSS) (HackEDU)

XML External Entities (XXE) (HackEDU)

Blind XXE (HackEDU)

Insecure Design (HackEDU)

Multi-Factor Authentication (MFA) (HackEDU)

Persistent Cookies (HackEDU)

Device Fingerprinting (HackEDU)

Static Application Security Testing (SAST) (HackEDU)

HackEDU: Intermediate | AppSec Professional

Learn in depth principles of applications security through identification and remediation of vulnerabilities and applying secure operational and infrastructure practices.

Hands-On Only | Total Learning Path Duration: 6 hours 0 minutes

Encoding, Hashing, and Encryption (HackEDU)

Stored Cross-Site Scripting (XSS) (HackEDU)

DOM-Based Cross-Site Scripting (XSS) (HackEDU)

Command Injection (HackEDU)

Remote Code Execution (HackEDU)

XSS in Third-Party Integration (HackEDU)

Vulnerable and Outdated Components (HackEDU)

Dependency Managment (HackEDU)

Identification and Authentication Failures (HackEDU)

JSON Web Token (JWT) Authentication Security (HackEDU)

Software and Data Integrity Failures (HackEDU)

Security Logging and Monitoring Failures (HackEDU)

Dynamic Application Security Testing (DAST) (HackEDU)

Continuous Monitoring (HackEDU)

Server-Side Request Forgery (SSRF) (HackEDU)

Capital One: Part 1 (HackEDU)

Capital One: Part 2 (HackEDU)

Capital One: Part 3 (HackEDU)

Abusing the $where Operator (HackEDU)

Using Comparison Operators (HackEDU)

User Input as Keys (HackEDU)

Information Exposure through Query String Parameters (HackEDU)

Commit Hooks (HackEDU)

Infrastructure as Code (HackEDU)

HackEDU: Advanced | AppSec Professional

Learn advanced techniques to secure API's, implement authentication, secure containers, and advanced cryptography.

Hands-On Only | Total Learning Path Duration: 6 hours 0 minutes

Broken Function Level Authorization (2023) (HackEDU)

Broken Object Level Authorization (2023) (HackEDU)

Broken Object Property Level Authorization (HackEDU)

OAuth Implementation Vulnerabilities: Part 1 (HackEDU)

OAuth Implementation Vulnerabilities: Part 2 (HackEDU)

Broken Authentication (HackEDU)

Account Lockout (HackEDU)

CAPTCHA (HackEDU)

Apache Struts 2 (HackEDU)

API Security Misconfiguration (HackEDU)

Security Configuration Managment (HackEDU)

Improper Inventory Managment (HackEDU)

Unrestricted Resource Consumption (HackEDU)

Unrestricted Access to Sensitive Business Flows (HackEDU)

Unsafe Consumption of APIs (HackEDU)

Docker Introduction (HackEDU)

Dockerfile Introduction (HackEDU)

Docker Secrets Handling (HackEDU)

Docker Container Hardening (HackEDU)

Docker Image Scanning (HackEDU)

Kubernetes Static Analyzer (HackEDU)

Hash-Based Message Authentication Code (HMAC) (HackEDU)

Digital Signatures (HackEDU)

Diffie-Hellman Key Exchange (HackEDU)