Learn what the most common threats are, how to detect them and how to effectively eliminate them
- in a real application, step by step.
Who is this course for?
This course will teach you how to design applications with security in mind from the first line. You'll walk through practical attack scenarios and learn how to avoid them right away. It doesn't matter if you work in JS, .NET or Python - you'll learn patterns that are universal.
Are you tired of testing just "if it works" - You want to test "if it can be broken down".
If at least one of the above describes you - this course is for you!
You want to write not only working, but also secure code.
You'll learn how to expand testing to include a security component. You'll see how to detect vulnerabilities that can cost a company thousands of dollars if they appear on production - and how to effectively report them to the dev team.
You want to stand out and not fall into the "junior" crowd.
You don't need to know 5 frameworks and 10 languages - just understand the basics of the OWASP Top 10 and learn to think like a security person. This will make your applications instantly more aware and you will become more "employable".
This course provides concrete examples that you can show to a recruiter or client.
Not only will you understand the OWASP Top 10 - you'll learn to talk and think about it like a professional. And that in this industry.... makes a difference.
You don't have to be an expert to understand application security. After this course, you'll not only know the OWASP Top 10 - you'll know how to detect, exploit and fix the most common vulnerabilities, exactly as the pros do.
What you will learn
Understand the OWASP Top 10
You'll learn all of the OWASP Top 10 categories in an easy-to-understand way - you'll get to know exactly what they mean, where they occur, and why they're still the biggest threat to web applications.
You will see practical symptoms of vulnerabilities in real code. You'll understand how to identify common bugs and what can be a "red flag" in a web application - regardless of programming language.
Recognize vulnerabilities
In each module, you'll dive into a short, specific introduction to a particular vulnerability. Then you'll analyze the code yourself, identify the problem and exploit the vulnerability. This is how you learn most effectively.
Analyze the code
Carry out the attack
Yes - realistically. In practice. You'll exploit the vulnerability in a specially prepared version of OWASP Juice Shop and see what a real attack looks like in a secure environment.
Immediately after you exploit the vulnerability, you will do something that is missing from most courses: you will fix the bug yourself. You'll see how to secure an application according to security best practices.
Fix the vulnerable code
You'll get not just knowledge from each module, but specific tips. You will learn how to design applications so that they are not hole-prone at the start.
Learn best practices
Embrace the language of the cybersec industry
OWASP will cease to be an abstract for you - you will start to move freely through terminology, acronyms and scenarios.
From now on, talking about AppSec won't stress you out.
If something surprises you or you get stuck - you are not left alone. Join our community on Discord, where you can ask, discuss or just chat with other learners.
Join the community
Learn the course step by step - from theory to practice to recommendations.
All in less than 4 hours!
1
2
10 lessons in an accessible video format
Each lesson is less than 15 minutes - you can complete the entire course in one evening or a free weekend.
Short, concise modules: OWASP Top 10 without beating around the bush.
Hands-on lab: testing on a vulnerable web application
You operate on a real OWASP JuiceShop application. You exploit the vulnerability, analyze the code, implement a fix and.... retest to make sure it was effective.
3
Fix and Recommendations
After each module, you learn how to fix the bug and how to avoid it in the future. For each category, we present a concise check-list of rules that apply to each web application.
Agenda
Watch the demo lesson
Real-life application (JuiceShop)
not theory, but live practice
What makes this course special?
Hands-on
you exploit bugs and learn how to fix them
Course created by practitioners
we do it every day at work
Accessible format
average lesson length:
~10 minutes
For over three years, he has been involved in cybersecurity and penetration testing, verifying security posture of web applications, infrastructure, cloud environments, and mobile applications.
He has authored numerous training courses - both technical (web application security) and more general, about safe use of the Internet (awareness).
He has conducted workshops and lectures online and live, for groups ranging from a few to several dozen people.
Szymon Jacek
Cyber security specialist with over 9 years of experience, specializing in offensive security, with a particular focus on application security and AI security research.
He has extensive knowledge in both red- and blue-team operations, which allows him to approach all challenges holistically. He is well versed in penetration testing and ensuring that secure development practices are implemented and followed.
Miroslaw Menard
Course authors
Tomasz Zielinski
"Great course. I wish no one had been able to watch it 10 years ago when I was just entering the cyber industry."
"After this course, I not only understood the risks, but started to implement good security practices in our projects on my own. This has translated into concrete improvements in the quality and security of applications."
Katarzyna Wojcik
"I finally understood what the OWASP Top 10 really is and why everyone in IT should know it. The perfect balance of theory and practice!"
"As a QA Tester I gained a lot of awareness thanks to this training. Since then I've been able to look at the applications under test from a whole new security perspective - I recommend it to everyone."
Michal Kowalski
Anna Nowicka
Feedback from participants
Backend Developer
Full-Stack Developer
QA Specialist
Cybersecurity Consultant
FAQ
Are you a developer? Or is your position related to AppSec? Do you perform functional testing? Are you already working in CyberSec? Or are you trying to make a difference in your career? This course is for anyone who wants to gain practical skills in the cyber security industry and learn about one of the most popular standards used in web application testing.
Not really. Our training provides comprehensive information on the OWASP Top10 standard: from theory to practical labs. We conduct penetration testing on a daily basis, so we wanted to show in the course what it looks like to use the knowledge from Top10 in practice. Although in the training we show you how to secure vulnerable code in a readable way, you will not become a Node.js developer. By purchasing access to the course, you gain the opportunity to learn the OWASP Top10 standard in its entirety: first in the form of a theoretical discussion of each category, then using a real vulnerability yourself in a real application, ending with implementing the security according to the recommendations given.
Definitely not. The videos are about three to four hours long; we tried to make the average length of one lesson about 10 minutes. Let's agree that this is not an amount of time that you can't manage to devote in a weekend or even one longer evening. The phrase 10 minutes is meant to imply that our courses are a fun and quick affair. You don't need to spend days or weeks to acquire valuable knowledge and skills.
No - the course is a practical introduction to the topic of web application security, no programming experience is required. We will do our best to explain everything, but basic knowledge of any programming language can be helpful.
Our course mainly requires you to be willing and have some free time. The training is conducted in the form of online recordings, so you will also need a computer - you will need a PC or laptop with virtualization available and free 15GB of disk space and at least 4GB of RAM to dedicate to the virtual machine (preferably 8GB or more).
The focus is on the OWASP Top10 standard. We present it based on the OWASP JuiceShop application, which is written in Node.js (JavaScript). The code written just in this framework will be analyzed and fixed. Keep in mind, however, that all the techniques and mechanisms used are universal to other environments, although in practice they may differ in syntax depending on the technology. Our goal is to help you understand all the OWASP Top10 categories, and we chose JuiceShop because it's a decent application.
We are available by email at support@10minuteshack.com and also on the channel on Discord. We will help you with everything.
This very training is based on the current most up-to-date version of the OWASP Top10 standard from 2021. By getting an access at this time, you can start learning right away and gain new skills today. Of course, we are aware that the new version of Top10 is scheduled to be published this year. We plan to prepare and publish an updated version of the course as soon as possible after the OWASP publication. However, it is worth bearing in mind that for the time being there is no specific date when the new Top10 2025 study will appear.
We decided to make the 2021 edition available for free, so that's the best moment to check out our content and familiarize yourself with OWASP Top 10.
Are you still hesitating? Write to us at contact@10minuteshack.com and tell us what you expect and what experience you have. We'll chat for a while and honestly let you know whether we think this training is for you or not yet (or already).
Choose your package
