OWASP Foundation Courses

Forensic Investigations of Web Exploitations

1 review

Explore network forensics techniques and open-source tools for investigating web server compromises, analyzing captured traffic, and reconstructing malicious sessions to uncover digital evidence.

• YouTube
• 53 minutes
• On-Demand
• Free Video

Catching Transparent Phish - Understanding and Detecting MITM Phishing Kits

Explore MITM phishing toolkits, their threat models, and detection methods. Learn about network-level analysis, classifiers, and countermeasures to enhance cybersecurity defenses.

• YouTube
• 58 minutes
• On-Demand
• Conference Talk

A Wander Through the World of Container Security

Explore container security, from Docker to Kubernetes, covering breakout vulnerabilities, networking challenges, and RBAC. Gain insights into potential threats and future attack vectors in containerized environments.

• YouTube
• 52 minutes
• On-Demand
• Conference Talk

Web Developers, Beware of the Tarpits for SAST in Your Code

Explore SAST testability patterns, their impact on code security, and strategies for improving vulnerability detection in web development.

• YouTube
• 47 minutes
• On-Demand
• Conference Talk

OWASP Flagship Projects - OWASP Dependency-Check

Learn to identify and mitigate vulnerabilities in software dependencies using OWASP Dependency-Check, enhancing application security through effective composition analysis.

• YouTube
• 29 minutes
• On-Demand
• Conference Talk

OWASP Flagship Projects - OWASP DefectDojo

Learn about OWASP DefectDojo, an open-source application security management tool. Explore its features, automation capabilities, deployment options, and community-driven development.

• YouTube
• 29 minutes
• On-Demand
• Conference Talk

OWASP Flagship Projects - OWASP Juice Shop

Explore OWASP Juice Shop, a vulnerable web application for security training. Learn about challenges, cross-site scripting, coding exercises, and future enhancements in this comprehensive overview.

• YouTube
• 24 minutes
• On-Demand
• Conference Talk

OWASP Cloud-Native Application Security Top 10 Flagship Project

Explore key security challenges and best practices for cloud-native applications, focusing on OWASP's top 10 vulnerabilities and mitigation strategies.

• YouTube
• 21 minutes
• On-Demand
• Conference Talk

OWASP Flagship Projects - OWASP Amass

Explore OWASP Amass, a powerful tool for information gathering and external asset discovery in cybersecurity. Learn its features, data sources, and future developments.

• YouTube
• 29 minutes
• On-Demand
• Conference Talk

OWASP Flagship Projects - OWASP Security Knowledge Framework

Explore the OWASP Security Knowledge Framework, its features, and security lifecycle. Learn about OSS projects, demo labs, and expert wizards for enhancing application security.

• YouTube
• 26 minutes
• On-Demand
• Conference Talk

OWASP Flagship Projects - OWASP ModSecurity Core Rule Set

Explore OWASP ModSecurity Core Rule Set: web application firewall rules, paranoia levels, and project developments for enhanced security and threat protection.

• YouTube
• 29 minutes
• On-Demand
• Conference Talk

OWASP Standard Classification - API Security Top 10 - A Beginner's Guide to Mitigation

Learn to mitigate API security risks using OWASP's Top 10 classification. Explore vulnerabilities, solutions, and strategies for implementing robust API security throughout the entire lifecycle.

• YouTube
• 31 minutes
• On-Demand
• Conference Talk

OWASP Standard Classification - Rough Consensus - An OWASP Story

Explore OWASP's journey in establishing software security standards through rough consensus, highlighting challenges, achievements, and future directions in the field.

• YouTube
• 27 minutes
• On-Demand
• Conference Talk

OWASP Standard Classification - Achieving Security by Shifting Left in Agile

Integrating security into Agile development through persona-based stories, prioritization, and testing strategies to create more secure web applications and shift security left in SDLC.

• YouTube
• 27 minutes
• On-Demand
• Conference Talk

Topics of Interest - Agile Threat Modeling with Open-Source Tools

Explore agile threat modeling using open-source tools to capture project risk landscapes efficiently. Learn about Threagile, a developer-friendly toolkit for continuous threat modeling in DevSecOps environments.

• YouTube
• 30 minutes
• On-Demand
• Conference Talk