Roadmap · lesson index/Level 9

Web Application Security

OWASP Top 10:2025, injection, XSS, access control flaws, SSRF and secure coding.

Prerequisites

• L6 Web Fundamentals
• L7 Security Fundamentals

Assessment

OWASP-mapped finding write-up + web security quiz.

Lessons

• 1.OWASP Top 10:2025
• 2.Injection Attacks
• 3.Cross-Site Scripting
• 4.Broken Access Control
• 5.SSRF
• 6.Authentication Flaws
• 7.Secure Coding

42 levels total — search them on Roadmap.