Lesson 1.1

The OWASP Top 10, practically

The Top 10 is a map of where things actually go wrong. Reading it as categories rather than a checklist is what makes it useful.

15mIntermediate13.3k students

Overview

What this lesson covers

  • Recognise each category in real application code
  • Prioritise by exploitability and impact
  • Use it as a review lens rather than a checklist

This lesson sits in Thinking About Threats, part of Practical Web Security. It assumes what came before it and leads directly into the next lesson in the module.


In this lesson you will:

  • Recognise each category in real application code
  • Prioritise by exploitability and impact
  • Use it as a review lens rather than a checklist