Recommended Path (Hands-On Only): Developer - Web Developer

HackEDU: Foundational | Web Developer

Foundational principles of application security for web developers.

Hands-On Only | Total Learning Path Duration: 6 hours

Encoding (HackEDU)

Hashing (HackEDU)

Encryption (HackEDU)

Broken Access Control (HackEDU)

Cross-Site Request Forgery (CSRF) (HackEDU)

Cryptographic Failures (HackEDU)

Secure Password Storage: Part 1 (HackEDU)

Secure Password Storage: Part 2 (HackEDU)

Secure Password Storage: Part 3 (HackEDU)

SQL Injection: Part 1 (HackEDU)

SQL Injection: Part 2 (HackEDU)

SQL Injection: Part 3 (HackEDU)

Reflected Cross-Site Scripting (XSS) (HackEDU)

XML External Entities (XXE) (HackEDU)

Insecure Design (HackEDU)

Multi-factor Authentication (HackEDU)

Persistent Cookies (HackEDU)

Device Fingerprinting (HackEDU)

Vulnerable and Outdated Components (HackEDU)

Identification and Authentication Failures (HackEDU)

JSON Web Token (JWT) Authentication Security (HackEDU)

Software and Data Integrity Failures (HackEDU)

Security Logging and Monitoring Failures (HackEDU)

Server-Side Request Forgery (SSRF) (HackEDU)

HackEDU: Intermediate | Web Developer

Learn in depth principles of applications security through identification and remediation of vulnerabilities and applying secure operational and infrastructure practices.

Hands-On Only | Total Learning Path Duration: 6 hours

Encoding, Hashing, and Encryption (HackEDU)

Stored Cross-Site Scripting (XSS) (HackEDU)

DOM-Based Cross-Site Scripting (XSS) (HackEDU)

Command Injection (HackEDU)

Abusing the $where Operator (HackEDU)

Using Comparison Operators (HackEDU)

User Input as Keys (HackEDU)

Information Exposure through Query String Parameters (HackEDU)

Broken Function Level Authorization (2023) (HackEDU)

Broken Object Level Authorization (2023) (HackEDU)

Broken Object Property Level Authorization (HackEDU)

Broken Authentication (HackEDU)

Account Lockout (HackEDU)

CAPTCHA (HackEDU)

OAuth Implementation Vulnerabilities: Part 1 (HackEDU)

OAuth Implementation Vulnerabilities: Part 2 (HackEDU)

API Security Misconfiguration (HackEDU)

Improper Inventory Managment (HackEDU)

Unrestricted Resource Consumption (HackEDU)

Unrestricted Access to Sensitive Business Flows (HackEDU)

Unsafe Consumption of APIs (HackEDU)

Hash-Based Message Authentication Code (HMAC) (HackEDU)

Digital Signatures (HackEDU)

Diffie-Hellman Key Exchange (HackEDU)