Interactive Learning
Pick a vulnerability to learn about
Filter:
Difficulty:
Beginner
15 minSQL Injection
If you are vulnerable to SQL injection, attackers can run arbitrary commands against your database.
Beginner
12 minCross-Site Scripting
If your site allows users to add content, you need to be sure that attackers cannot inject malicious JavaScript.
Intermediate
18 minCommand Execution
If your application calls out to the OS, you need to be sure command strings are securely constructed.
Beginner
10 minClickjacking
As an application author, you need to be sure your users aren't having their clicks stolen by attackers.
Intermediate
16 minCross-Site Request Forgery
If an attacker can forge HTTP requests to your site, they may be able to trick your users into triggering unintended actions.
Beginner
14 minDirectory Traversal
Ensure file paths are safely interpreted, or hackers can access sensitive files on your server.
7
Total Lessons
240+
Minutes of Content
9
Categories
3
Difficulty Levels
Recommended Learning Path
New to web security? Follow our recommended path to build your knowledge systematically.
1
Start with Beginner lessons2
Practice with Intermediate3
Master Advanced topics