Tutorvo
Menu
Courses Guides Pricing Log in Sign up
Cybersecurity Intermediate

Web Application Security

Break and defend web apps — the OWASP Top 10, on a vulnerable app you run yourself

13 lessons 1.3 h Certificate

  • One-time payment
  • 14-day money-back guarantee
  • Secure checkout with Stripe

About this course

Web applications break in a handful of predictable ways, and once you can see the HTTP request behind each one they stop being mysterious. This course runs on a vulnerable app you install yourself, such as DVWA or Juice Shop, so you can experiment without touching anyone else. You rewrite database queries through SQL injection, land scripts in a victim page with XSS, ride a user session with CSRF, and make a server fetch internal resources with SSRF. You probe login and session handling, turn an uploaded file into code, and learn how fixation and hijacking take over a session. Every lesson closes with the server-side change that would have stopped the attack, and a final exam asks you to find, confirm and write up real findings on your own app.

Curriculum

Course content

13 lessons · 1.3 h · final exam

  1. How the Web Really Works (Attacker View)Reading6 min
    Unlocked when you buy the course
  2. Mapping the Attack SurfaceReading6 min
    Unlocked when you buy the course
  3. SQL InjectionReading6 min
    Unlocked when you buy the course
  4. Cross-Site Scripting (XSS)Reading6 min
    Unlocked when you buy the course
  5. Cross-Site Request Forgery (CSRF)Reading6 min
    Unlocked when you buy the course
  6. Broken Access Control & IDORReading6 min
    Unlocked when you buy the course
  7. Authentication & Session TestingReading6 min
    Unlocked when you buy the course
  8. Server-Side Request Forgery (SSRF)Reading6 min
    Unlocked when you buy the course
  9. Path Traversal & File InclusionReading6 min
    Unlocked when you buy the course
  10. Command Injection & Race ConditionsReading6 min
    Unlocked when you buy the course
  11. File Upload VulnerabilitiesReading6 min
    Unlocked when you buy the course
  12. Session Attacks — Hijacking & FixationReading6 min
    Unlocked when you buy the course
  13. Reporting, Fixes & Certification ExamReading6 min
    Unlocked when you buy the course
  14. Final exam8 questions, 70% to pass, unlimited retries.

Certificate

Finish with a certificate you can verify

Complete every lesson and pass the final exam to receive a certificate of completion for this course, with a unique credential ID and a public verification page.

  • Names the course, your score and the date of issue
  • A verification link for your CV or LinkedIn profile
  • 8 questions, 70% to pass, unlimited retries.

A Tutorvo certificate confirms that you completed a course. It is not an official or professional qualification.

Illustration. Your certificate shows your own name, course and credential ID.

Before you buy

Questions about this course

Is this a subscription?

No. You pay $9.99 once for this course. There is no subscription and nothing renews automatically. Prices are in US dollars; taxes may be added where required.

What exactly do I get?

All lessons and labs of this course, the final exam and the certificate, including later updates to the course, for as long as Tutorvo offers it. Access is personal and tied to your account.

Can I get a refund?

Yes. If you are not satisfied, email hello@tutorvo.com within 14 days of buying and we refund the course in full via Stripe. The guarantee does not apply once a certificate for the course has been issued to you, or where there are signs of abuse.

When can I start?

Right after payment. Access starts immediately at your request; for consumers in the EU/EEA the statutory right of withdrawal therefore ends once access has begun, while our 14-day money-back guarantee applies regardless.

Do I need Excel or other software?

No. The labs run in a spreadsheet inside your browser on a laptop, tablet or phone. Function names and syntax follow Excel.

Is the certificate an official qualification?

No. It confirms that you completed all lessons of the course and passed its final exam. It is not an official, state-recognised or professional qualification. The name is taken from your profile when the certificate is issued.

Full details are in our Terms · hello@tutorvo.com

Browse all Cybersecurity courses →
$9.99one-time payment
Buy course