Library · practice
Application security
Find and fix the vulnerability classes in the OWASP Top 10 in your own code: injection, broken access control and weak cryptography, with static analysis in the pipeline.
Application security appeared in 30% of the Cybersecurity Engineer job descriptions we read, and secure coding is expected of software engineers too. This shelf is defensive: it teaches how to recognise insecure patterns and, above all, how to fix them.
The examples use Bandit, an open static analysis tool for Python, on a small insecure module and its fixed version. Practise attack techniques only on systems built for it, such as OWASP Juice Shop or your own machine, and only with permission.
Beginner lessons for Application security are being written.
Advanced lessons for Application security are being written.