Threat modeling
Threat modeling. Concepts and practical scenarios in Application Security.
Theme
Application Security
Application threats, identity, authorization, input handling, cryptography, secrets, and dependency security.
640questions16 topics
Choose your next challenge
Explore the topics and choose a challenge to get started.
Authentication and authorization
Authentication and authorization. Concepts and practical scenarios in Application Security.
Passwords and secure storage
Passwords and secure storage. Concepts and practical scenarios in Application Security.
Sessions and cookies
Sessions and cookies. Concepts and practical scenarios in Application Security.
Tokens and JWT
Tokens and JWT. Concepts and practical scenarios in Application Security.
OAuth 2.0 and OpenID Connect
OAuth 2.0 and OpenID Connect. Concepts and practical scenarios in Application Security.
SQL injection
SQL injection. Concepts and practical scenarios in Application Security.
XSS
XSS. Concepts and practical scenarios in Application Security.
CSRF
CSRF. Concepts and practical scenarios in Application Security.
SSRF
SSRF. Concepts and practical scenarios in Application Security.
Validation and uploads
Validation and uploads. Concepts and practical scenarios in Application Security.
Applied cryptography
Applied cryptography. Concepts and practical scenarios in Application Security.
Secrets and credential rotation
Secrets and credential rotation. Concepts and practical scenarios in Application Security.
Dependency security
Dependency security. Concepts and practical scenarios in Application Security.
Least privilege
Least privilege. Concepts and practical scenarios in Application Security.
Auditing
Auditing. Concepts and practical scenarios in Application Security.