Web Security: Common Vulnerabilities And Their Mitigation (Udemy.com)
A guide to dealing with XSS, session hijacking, XSRF, credential management, SQLi and a whole lot more
Created by: Loony Corn
Last updated October 2021
What you will learn
- Understand how common web security attacks work
- Know how to write code which mitigates security risks
- Implement secure coding practices to reduce vulnerabilities
How it compares
Against the other 523 rated Udemy courses in Hacking on CourseDuck:
- Rating4.4 out of 5higher than 33% of them
- Reviews684#232 of 524 by number of reviews
- Length8 hourslonger than 64% of them
- Last updatedOctober 2021earlier than 76% of them
Course Description
Coat your website with armor, protect yourself against the most common threats and vulnerabilities. Understand, with examples, how common security attacks work and how to mitigate them. Learn secure practices to keep your website users safe.
Let's parse that.
- How do common security attacks work?: This course walks you through an entire range of web application security attacks, XSS, XSRF, Session Hijacking, Direct Object Reference and a whole lot more.
- How do we mitigate them?: Mitigating security risks is a web developer's core job. Learn by example how you can prevent script injection, use secure tokens to mitigate XSRF, manage sessions and cookies, sanitize and validate input, manage credentials safely using hashing and encryption etc.
- What secure practices to follow?: See what modern browsers have to offer for protection and risk mitigation, how you can limit the surface area you expose in your site.
What's included in this course:
- Security attacks such as Cross Site Scripting, Session Hijacking, Credential Management, Cross Site Request Forgery, SQL Injection, Direct Object Reference, Social Engineering
- Risk mitigation using the Content Security Policy Header, user input validation and sanitization, secure token validation, sandboxed iframes, secure sessions and expiry, password recovery
- Web security basics: Two factor authentication, Open Web Application Security Project,
Instructor Details
- 4.4 Rating
684 Reviews
Loony Corn
Loonycorn is us, Janani Ravi and Vitthal Srinivasan. Between us, we have studied at Stanford, been admitted to IIM Ahmedabad and have spent years working in tech, in the Bay Area, New York, Singapore and Bangalore.
Janani: 7 years at Google (New York, Singapore); Studied at Stanford; also worked at Flipkart and Microsoft
Vitthal: Also Google (Singapore) and studied at Stanford; Flipkart, Credit Suisse and INSEAD too
We think we might have hit upon a neat way of teaching complicated tech courses in a funny, practical, engaging way, which is why we are so excited to be here on Udemy!
We hope you will try our offerings, and think you'll like them :-)
More courses by Loony Corn
GCP: Complete Google Data Engineer and Cloud Architect Guide (2018)
4.0 (7,369 Reviews)
Provider: Udemy
Time: 27.9h
$94.99
From 0 to 1: The Cassandra Distributed Database (2016)
4.1 (2,613 Reviews)
Provider: Udemy
Time: 5.9h
$59.99
From 0 to 1: Data Structures & Algorithms in Java (2019)
4.5 (1,381 Reviews)
Provider: Udemy
Time: 15h
$14.99
Learn By Example: Hadoop, MapReduce for Big Data problems (2018)
4.5 (1,209 Reviews)
Provider: Udemy
Time: 13.7h
$79.99
Learn by Example : HBase - The Hadoop Database (2018)
4.4 (1,156 Reviews)
Provider: Udemy
Time: 4.9h
$54.99
Kubernetes On The Cloud & The CNCF CKA Certification (2018)
4.1 (1,108 Reviews)
Provider: Udemy
Time: 8.3h
$13.99
More Hacking courses
Getting Started with Wireshark: The Ultimate Hands-On Course (2025)
4.8 (12,167 Reviews)
Provider: Udemy
Time: 4.4h
$109.99
The Ultimate Dark Web, Anonymity, Privacy & Security Course (2025)
4.8 (9,329 Reviews)
Provider: Udemy
Time: 10.3h
$27.99
Computer Basics for Beginners: Understanding Computer Basics (2025)
4.8 (4,524 Reviews)
Provider: Udemy
Time: 5.8h
$14.99
Ultimate F5 LTM Training from Beginner to Expert 2026
4.8 (1,927 Reviews)
Provider: Udemy
Time: 13.5h
$84.99
IP Addressing and Subnetting - Hands-on Learning Approach (2020)
4.8 (1,522 Reviews)
Provider: Udemy
Time: 4.2h
$15.99
Cisco BGP Masterclass for Enterprise Network Engineers (2026)
4.8 (1,369 Reviews)
Provider: Udemy
Time: 16.4h
$11.99
Reviews
By Tanmay on 7/18/2025
The start is really good. Understanding the building blocks will rally help in the further learning of why and how of the security attacks and measures!!
By Carolina Vila on 11/13/2023
The last section should be included earlier. The legibility of the slides was very bad. Please don't use all caps and garrish, conflicting colors on a stark white background. Otherwise, the information of this course was very good and the speaker is clear and very easy to understand.
By Steven Yetton on 9/19/2021
Great course! Very well organized and the examples are not overly complicated to keep the focus on the concept being conveyed. I highly recommend this course to anyone wanting to understand web application vulnerabilities and how to protect them.
By Ganesh Lande on 7/5/2020
This course covers good fundamentals of web security. Section 14" PHP and MYSQL is irrelevant to the topic, should be removed.
By Bob Maier on 5/29/2019
While it provided good information, several of the mitigations it provided were not completely valid. For example stored procs can be written in a way that permit SQLi attackes to occur.
By Yaw Acquaah on 6/18/2018
Excellent. Would like to take a lot more courses from this particular instructor. Please provide other courses taught by the same instructor.
By Mgwaring0@Gmail.Com on 4/15/2018
A good course for starters, easily to follow with a steady pace to help avoid information overload. Examples are clear with practical code to re-inforce concepts in action. It's a well structured course, clearly introducing concept one at a time and explaining them completely before moving on. Authors clearly know what they are teaching and have given a lot of thought to how best to navigate the materials. However, If you are a more advanced developer or know much about web security already then you may find the pace a little slow. In that case I suggest you jump to a faster paced, more advanced tutorial.
By Richard Hopkins-Lutz on 2/27/2018
Very basic, but a good primer/refresher on basic security with some good technical tutorials. If you are an experienced developer, this will be almost entirely a review and reminder of what you should be doing, with perhaps a few small updates here and there. Presenter is clear and knows her topic very well, and goes at a good pace. The slides are a bit cheesy though, and each topic is covered in so much depth that it can be a bit tough to stay focused some times if it is something you already know.
By Ujjawal Sharma on 1/19/2018
Most of the examples are not shown as a practical example. They are clear enough to understand the overall concept, but, a practical example is always expected in a video tutorial. The video tutorial is definitely very nice and full of content. I was happy to see that by the end of the course OWASP top 10 were totally covered. I would recommend this course to my friends as well.
By Saket Pani on 10/20/2016
Good foundation is built before starting to getting into the actual subject. This is indeed a great style of teaching. I consider good style of teaching which explains or addresses the following aspects of a topic in the following order - Why (it exists) - What (is it) - How (the details of it) Thanks.
Quality Score
No CourseDuck member has rated this course yet. Taken it? Give each part a thumbs up or down.
Overall Score : 88 / 100












