Exploiting and Securing Vulnerabilities in Java Applications
About this course
In this course, we will wear many hats. With our Attacker Hats on, we will exploit Injection issues that allow us to steal data, exploit Cross Site Scripting issues to compromise a users browser, break authentication to gain access to data and functionality reserved for the ‘Admins’, and even exploit vulnerable components to run our code on a remote server and access some secrets. We will also wear Defender Hats. We will dive deep in the code to fix the root cause of these issues and discuss various mitigation strategies. We do this by exploiting WebGoat, an OWASP project designed to teach penetration testing. WebGoat is a deliberately vulnerable application with many flaws and we take aim at fixing some of these issues. Finally we fix these issues in WebGoat and build our patched binaries. Together we will discuss online resources to help us along and find meaningful ways to give back to the larger Application Security community.
90/100
CourseAsk score
- What the provider tells you
- 39/45
- Who stands behind it
- 35/35
- How complete the listing is
- 16/20
Scores how much the provider publishes and who stands behind it — not how well it is taught.
What you'll learn
- Exploit injection vulnerabilities to extract data from Java applications
- Execute cross-site scripting attacks to compromise user browsers
- Break authentication mechanisms to gain unauthorized access
- Exploit vulnerable components to achieve remote code execution
- Fix security vulnerabilities at the source code level
- Apply mitigation strategies to prevent common web application attacks
- Build and deploy patched binaries of vulnerable applications
- Use WebGoat for hands-on penetration testing practice
Course objectives
- Understand common vulnerabilities in Java web applications from both offensive and defensive perspectives
- Gain practical experience exploiting and remediating security flaws in real code
- Learn to use OWASP resources and contribute to the application security community
Price shown by Coursera — confirm on their site.
Enroll on CourseraYou'll be redirected to Coursera to complete enrollment.
- Listed & compared by CourseAsk
- English · 0
Udemy
Coursera
Compared on these lists
Where this course ranks against the alternatives.