Web Security and Hacking for Beginners (Udemy.com)

Very high quality content, delivery and examples were great, although this would be challenging for many beginners without developer knowledge and perhaps a '101' on some of the developer terminology used would have helped. Nonetheless, I learned a lot from this.

Overall the course is good but I have the feeling this course is a bit basic, specially if you've been developing rails apps for some years. Should be fine for a person new to web development or Rails in general. I really liked the use of some hacking tools to test the app!

Great course, concise and provides an insight on different sides and logics of hacking and security, helping you to take into consideration safety requirements. Also the design and structure of the course is well done. Great job

The class is mostly centered around Ruby, but it does give a good overall overview on the Web vulnerabilities (and how to potentially fix it). Some of the videos do need, however, an update, as the technology and some versions have changed since. All in all, a very good class, either to get a basic knowledge or to sum up what has been learned along the way.

Good course. One complaint: The course jumps right in without showing you how to install the Month Simple App. I downloaded and extracted it, but couldn't run "rails s" because it doesn't exist there. install Instructions in the readme file didn't work either so I'm stuck at this point.

The light hearted exchanges/intros between Chris and Jon were a good diversion from the more in depth details. They helped put additional context to the lectures following and pointers to the important aspects of this topic. Overall, a very positive experience. Thank you gents.

The information is good, but it's all a bit out of date. I would like to know about how the improvements of backend and frontend frameworks have changed things. They claim to solve a lot of these problems, but do they, or do they just give a false sense of security?

I find some of the explanation a little slow and a little lacking in detail "beyond Ruby", but I have to remember that it focuses on the Rails framework. The discussion between the two guys is a bit too "fluffy" for my liking - by contrast the section on Bcrypt is very concise and engaging. They do miss important bits of context, like when discussing the MD5-hashed passwords they don't make it clear that you can't just pass in the MD5 hash as a password, expecting it to work, because of course that value would be re-hashed and result in a different value. That's obvious to me but they could have rounded off their explanation of the hash (its scope and use) with that. Stuff like that helps reinforce principles and only takes seconds. Also they didn't explain what makes SQL parameters work the way they do: Is it part of the ANSI SQL standard, or dependent upon the application codebase. Is it possible to use parameters and accidentally end up with unescaped content being passed to queries? 9/10 for me.

Yes, Got lot of insights on the security issues , please can we have some course and topics which can help QA manual testers to know more on how to find vulnerabilities and provide quick feedback to developers

This course is very interesting and its covered material is illustrated with practical examples. Teaching is clear and engaging. I would highly recommend it to any beginner in Web Security who wants to be introduced to the most fundamental topics and concepts.