• OWASP Top 10 for Web
    • Front-end Top 5
    • AWS Top 10
    • OWASP Top 10 for API
    • OWASP Top 10 for iOS
    • Docker CLI Top 10
    • Docker Compose Top 10
    • OWASP Top 10 for Kubernetes
  • CodeDefender
  • Try SCORM
  • Plans
  • About
  • Plans & Pricing
  • About Company
  • Try SCORM
  • CodeDefender
  • Get Your Free Trial
  • Book a Demo
  • OWASP Top 10 for Web
  • Front-end Top 5
  • AWS Top 10
  • OWASP Top 10 for API
  • OWASP Top 10 for iOS
  • Docker CLI Top 10
  • Docker Compose Top 10
  • OWASP Top 10 for Kubernetes
  • DEMO VIDEO

Kontra OWASP Top 10 for Web

KONTRA's developer security training of OWASP Top 10 is inspired by real-world vulnerabilities and case studies, we have created a series of interactive application security training modules to help developers understand, identify and mitigate security vulnerabilities in their applications.

  • Capital One SSRF

    Capital One SSRF
  • Clickjacking

    Clickjacking
  • Command Injection

    Command Injection
  • Components with Known Vulnerabilities

    Components with Known Vulnerabilities
  • Cross-Site Request Forgery

    Cross-Site Request Forgery
  • Directory Traversal

    Directory Traversal
  • DOM XSS

    DOM XSS
  • Forced Browsing

    Forced Browsing
  • Horizontal Privilege Escalation

    Horizontal Privilege Escalation
  • Host Header Injection

    Host Header Injection
  • Insecure URL Redirect

    Insecure URL Redirect
  • Leftover Debug Code

    Leftover Debug Code
  • Log4j JNDI Injection

    NEW
    Log4j JNDI Injection
  • Personally Identifiable Data in URL

    Personally Identifiable Data in URL
  • Reflected Cross Site Scripting

    Reflected Cross Site Scripting
  • Ruby rest-client Backdoor

    Ruby rest-client Backdoor
  • Session Fixation

    Session Fixation
  • SQL Injection

    SQL Injection
  • Stored Cross Site Scripting

    Stored Cross Site Scripting
  • TikTok Cross Site Scripting

    TikTok Cross Site Scripting
  • Token Exposure in URL

    Token Exposure in URL
  • User Enumeration

    User Enumeration
  • Vertical Privilege Escalation

    Vertical Privilege Escalation
  • Weak Randomness

    Weak Randomness
  • XML Entity Injection

    XML Entity Injection
Kontra Logo
KONTRA
AppSec Training by ThriveDX

MENU

  • Kontra
  • About
  • Book a Demo
  • Terms & Conditions
  • Privacy Policy
  • Cookies Policy

Kontra Application Security Training PTE. LTD.

#14-04 Singapore Business Federation Centre,
160 Robinson Road,
Singapore,
068914,
appsec@thrivedx.com

Copyright © 2022 Kontra Application Security Training PTE. LTD.
Embed Exercise

Use the following code snippet to embed the exercise card on your web page, blog or wiki

Demo Video
Kontra demo video
Book a Demo
Thank you for your interest in
Kontra Application Security by ThriveDX!
A sales representative will be in touch soon
to schedule your demo.

Get Your Free Trial
Thank you for your interest in
Kontra Application Security by ThriveDX!
A sales representative will be in touch soon
to arrange your free trial.

Access our Free OWASP Top 10 for Web
Enter your information below to join our referral
program and gain FREE access for 14 days
Follow the steps below to get FREE access to our OWASP top 10 for Web course for 14 days
  1. Simply copy the LinkedIn message below
  2. Post the message on your LinkedIn profile
  3. We will contact you as soon as possible on LinkedIn and send you an invite to access our OWASP Top 10 for Web course
IMPORTANT!
Make sure you confirm the tag @ThriveDX Enterprise after pasting the text below in your LinkedIn to avoid delays in getting access to your account.
instruction
Ready to share?
Take me to linkedin now >
Thank you for sharing!

We use cookies to ensure you get the best experience on our website. Accept
Read more