HACKR.GG
Fundamentals

OWASP Top 10

The industry standard list of the most critical web application security risks. Learn what each category means and where the vulnerabilities you have studied fit in.

Beginner20 min7 lessons1 hands-on
Start free →I have an account
Free account. No credit card.

You'll be able to

  • ✓Name and describe all ten OWASP Top 10 vulnerability categories
  • ✓Recognise which category applies to a given finding
  • ✓Explain the real-world impact of each category with examples
  • ✓Use the OWASP Top 10 as a mental checklist during recon

Lessons

  1. 1What is OWASP?
  2. 2Your Progress Against the Top 10
  3. 3A01 — Broken Access Control (Deep Dive)
  4. 4A02 — Cryptographic Failures (Deep Dive)
  5. 5A03 — Injection (Deep Dive)
  6. 6Your Turn: Classify the BugHANDS-ON
  7. 7Mini Lab — Match the Vulnerability to the Category
Start free →