Skip to content
UdemyHackingPaid courseAll LevelsCertificate

Web Security: Common Vulnerabilities And Their Mitigation (Udemy.com)

A guide to dealing with XSS, session hijacking, XSRF, credential management, SQLi and a whole lot more

Created by: Loony Corn

Last updated October 2021

icon
What you will learn

  • Understand how common web security attacks work
  • Know how to write code which mitigates security risks
  • Implement secure coding practices to reduce vulnerabilities

How it compares

Against the other 523 rated Udemy courses in Hacking on CourseDuck:

  • Rating4.4 out of 5higher than 33% of them
  • Reviews684#232 of 524 by number of reviews
  • Length8 hourslonger than 64% of them
  • Last updatedOctober 2021earlier than 76% of them

icon
Course Description

Coat your website with armor, protect yourself against the most common threats and vulnerabilities. Understand, with examples, how common security attacks work and how to mitigate them. Learn secure practices to keep your website users safe.

Let's parse that.

  • How do common security attacks work?: This course walks you through an entire range of web application security attacks, XSS, XSRF, Session Hijacking, Direct Object Reference and a whole lot more.
  • How do we mitigate them?: Mitigating security risks is a web developer's core job. Learn by example how you can prevent script injection, use secure tokens to mitigate XSRF, manage sessions and cookies, sanitize and validate input, manage credentials safely using hashing and encryption etc.
  • What secure practices to follow?: See what modern browsers have to offer for protection and risk mitigation, how you can  limit the surface area you expose in your site.  

What's included in this course:

  • Security attacks such as Cross Site Scripting, Session Hijacking, Credential Management, Cross Site Request Forgery, SQL Injection, Direct Object Reference, Social Engineering 
  • Risk mitigation using the Content Security Policy Header, user input validation and sanitization, secure token validation, sandboxed iframes, secure sessions and expiry, password recovery
  • Web security basics: Two factor authentication, Open Web Application Security Project, 


icon
Udemy Discount

The discount is applied through our link. Open the course from here and Udemy's current promotional price is applied at checkout on most courses, no code to type.

Some courses are excluded from Udemy's promotions. If the price does not drop, clear your browser cookies and use the button again.

icon
Instructor Details

Loony Corn

Loonycorn is us, Janani Ravi and Vitthal Srinivasan. Between us, we have studied at Stanford, been admitted to IIM Ahmedabad and have spent years  working in tech, in the Bay Area, New York, Singapore and Bangalore.

Janani: 7 years at Google (New York, Singapore); Studied at Stanford; also worked at Flipkart and Microsoft

Vitthal: Also Google (Singapore) and studied at Stanford; Flipkart, Credit Suisse and INSEAD too

We think we might have hit upon a neat way of teaching complicated tech courses in a funny, practical, engaging way, which is why we are so excited to be here on Udemy!

We hope you will try our offerings, and think you'll like them :-)

icon
More courses by Loony Corn

$94.99

$59.99

$14.99

$79.99

$54.99

$13.99

icon
More Hacking courses

$109.99

$27.99

$14.99

$84.99

$15.99

$11.99

icon
Reviews

4.4

684 ratings on Udemy

Select a bar to show only those reviews.Select the bar again to show every rating.

By Tanmay on 7/18/2025

The start is really good. Understanding the building blocks will rally help in the further learning of why and how of the security attacks and measures!!

By Carolina Vila on 11/13/2023

The last section should be included earlier. The legibility of the slides was very bad. Please don't use all caps and garrish, conflicting colors on a stark white background. Otherwise, the information of this course was very good and the speaker is clear and very easy to understand.

By Steven Yetton on 9/19/2021

Great course! Very well organized and the examples are not overly complicated to keep the focus on the concept being conveyed. I highly recommend this course to anyone wanting to understand web application vulnerabilities and how to protect them.

By Ganesh Lande on 7/5/2020

This course covers good fundamentals of web security. Section 14" PHP and MYSQL is irrelevant to the topic, should be removed.

By Bob Maier on 5/29/2019

While it provided good information, several of the mitigations it provided were not completely valid. For example stored procs can be written in a way that permit SQLi attackes to occur.

By Yaw Acquaah on 6/18/2018

Excellent. Would like to take a lot more courses from this particular instructor. Please provide other courses taught by the same instructor.

By Mgwaring0@Gmail.Com on 4/15/2018

A good course for starters, easily to follow with a steady pace to help avoid information overload. Examples are clear with practical code to re-inforce concepts in action. It's a well structured course, clearly introducing concept one at a time and explaining them completely before moving on. Authors clearly know what they are teaching and have given a lot of thought to how best to navigate the materials. However, If you are a more advanced developer or know much about web security already then you may find the pace a little slow. In that case I suggest you jump to a faster paced, more advanced tutorial.

By Richard Hopkins-Lutz on 2/27/2018

Very basic, but a good primer/refresher on basic security with some good technical tutorials. If you are an experienced developer, this will be almost entirely a review and reminder of what you should be doing, with perhaps a few small updates here and there. Presenter is clear and knows her topic very well, and goes at a good pace. The slides are a bit cheesy though, and each topic is covered in so much depth that it can be a bit tough to stay focused some times if it is something you already know.

By Ujjawal Sharma on 1/19/2018

Most of the examples are not shown as a practical example. They are clear enough to understand the overall concept, but, a practical example is always expected in a video tutorial. The video tutorial is definitely very nice and full of content. I was happy to see that by the end of the course OWASP top 10 were totally covered. I would recommend this course to my friends as well.

By Saket Pani on 10/20/2016

Good foundation is built before starting to getting into the actual subject. This is indeed a great style of teaching. I consider good style of teaching which explains or addresses the following aspects of a topic in the following order - Why (it exists) - What (is it) - How (the details of it) Thanks.

Showing all 10 reviews on CourseDuck

Read all 684 reviews on Udemy

icon
Quality Score

No CourseDuck member has rated this course yet. Taken it? Give each part a thumbs up or down.

Content Quality
/
Video Quality
/
Qualified Instructor
/
Course Pace
/
Course Depth & Coverage
/

Overall Score : 88 / 100