Web Application Security

OWASP Top 10 to Burp workflows.

How the web works, auth sessions, OWASP Top 10, API/JWT basics, Burp Suite workflows, and remediation-focused reporting — practiced only on authorized lab apps.

Syllabus

How the web works

HTML/JS security basics, HTTP, cookies, sessions.

How Websites Work (preview)
HTML, CSS and JavaScript Security Fundamentals
HTTP Requests and Responses
Cookies and Sessions
Authentication Security

OWASP Top 10 core

Injection, XSS, CSRF, SSRF, access control, uploads.

OWASP Top 10
SQL Injection
Cross-Site Scripting (XSS)
Cross-Site Request Forgery (CSRF)
Server-Side Request Forgery (SSRF)
Broken Access Control
IDOR
File Upload Vulnerabilities
Directory Traversal
Security Misconfigurations

APIs, Burp & remediation

API/JWT/OAuth, Burp workflows, secure coding.

API Security
JWT Security
OAuth Security Fundamentals
Business Logic Vulnerabilities
Burp Suite Professional Workflows
Web Application Penetration Testing
Secure Coding and Remediation

Inside this track

Labs · Quizzes · Certificate

Practice stays inside the course. Labs for this track unlock free when you enrol; quizzes check the same topics; finish ≈90%+ to claim a CYNARKS Academy certificate.

Track labs

12 linked labs · free with this course enrol

+6 more in track

Track quiz

104 questions matched to this course topics

Knowledge checks for this track only — not a separate global quiz menu.

Start track quiz

CYNARKS certificate

Educational completion certificate · verify by ID

Your progress: 0% · enrol to unlock claim

Enrol in this course first.