Mastering the OWASP Top 10 Vulnerabilities ~2023

Vulnerabilities in OWASP Top 10:- Understanding, Detecting, and Preventing | Learn with Fun way

Created by: Foyzul Islam
Ethical Hacker, Computer Scientist

What Will I Learn?

• OWASP Top 10
• SQL Injection
• Cross site Scripting
• Upload Vulnarebility
• About Authentication vulnerabilities
• Weak Login Credentials
• Unsecure Password Change and Recovery
• Flawed Two-Factor Authentication
• OS Command Injection
• Blind OS command Injection Vulnerabilities
• Detecting Blind OS Injection Vulnerabilities
• About Payload
• Access files and Directories that are stored outside the web root folder
• About The vulnerable code
• Access arbitrary files and directories stored on the filesystem
• Business logic vulnerabilities ~ Everything
• Application logic vulnerabilities ~Erverything
• 2FA broken logic
• Password & 2FA bypass
• Authentication bypass via information disclosure
• Unnecessarily exposing highly sensitive information, such as credit card details
• Hard-coding API keys, IP addresses, database credentials, and so on in the source code
• About Access Control vulnerabilities
• Admin Functionality
• Method-based access control
• URL-based access control
• login bypass
• Blind SQL injection
• Injections via filename
• SSRF via filename
• Third-party vulnerabilities
• File upload race condition
• Basic SSRF
• Blind SSRF
• File-based SSRF
• Parameter-based SSRF
• Types of Cross-Site Scripting
• Advanced Cross-Site Scripting Techniques
• Detecting and Exploiting Cross-Site Scripting

Requirements

• No programming experience needed. You will learn everything you need to know
• Just need to start.............

Target audience

• Anyone interested in web security
• How Wants to be Bug Bounty Hunter
• How wants to practice OWASP Top 10
• How Loves Web Application penetration testing
• Ethical hackers
• Cybersecurity professionals
• Penetration testers
• How wants to Learn Authentication vulnerabilities
• How wants to Learn SQL Injection
• How wants to learn Password & 2FA bypass
• Who wants to be master about Information disclosure vulnerabilities
• Who wants to Learn File upload vulnerabilities
• Increased knowledge and understanding of SSRF vulnerabilities