Web Application Security Essentials Training in Kraków, Poland

This course introduces participants to the core principles and practices of Web Application Security. It covers common vulnerabilities, secure coding practices, and defensive strategies based on industry standards like OWASP Top 10. Through hands-on labs and case studies, learners will gain practical skills to identify, prevent, and mitigate security risks in web applications.

Foundations of Web Application Security

• Introduction to Web Application Security

  • Threat landscape and attack surface

  • CIA triad and web security principles

• Web Architecture and Attack Vectors

  • HTTP/S, cookies, sessions, input handling

  • Role of authentication and authorization

• OWASP Top 10 Overview (2021 edition)

  • Key vulnerabilities explained

  • Business impact of web security flaws

Common Web Application Vulnerabilities

• Injection Attacks (SQL Injection, Command Injection)

• Broken Authentication & Session Management

• Cross-Site Scripting (XSS)

• Cross-Site Request Forgery (CSRF)

• Insecure Direct Object References (IDOR)

• Security Misconfigurations

Defense & Secure Practices

• Secure Coding Practices

  • Input validation, output encoding, secure session handling

  • Password storage and authentication best practices

• Secure Design & Deployment

  • HTTPS, CORS, Content Security Policy

  • Logging and monitoring

• Tools & Testing

  • Web vulnerability scanners (Burp Suite, OWASP ZAP)

  • Static & dynamic analysis basics

Hands-on Exercises

Summary and Conclusion