Learn. Build. Master.

QUICK START:HTML CSS JavaScript TypeScript Python SQL React Next.js Node.js DSA System Design DevOps Cybersecurity AI / ML

IntermediateCybersecurity

~26 Hours 11 Lessons100% Free

Cybersecurity & Defensive Web Engineering

OWASP Top 10 defenses, secure authentication, cryptographic hashing, and threat modeling.

Learn defensive web security: OWASP Top 10 vulnerabilities (SQLi, XSS, CSRF, SSRF, Broken Access Control), cryptographic algorithms (symmetric vs asymmetric), bcrypt password hashing, JWT security, HTTPS/TLS certificates, Content Security Policy (CSP), and secure coding standards.

What You Will Learn

OWASP Top 10 Vulnerability Mitigation & Penetration Defense
SQL Injection & Cross-Site Scripting (XSS) Prevention
Cryptographic Hashing (bcrypt, argon2) & Salt Mechanics
HTTPS/TLS Handshake Protocols & Public Key Infrastructure
HTTP Security Headers (CSP, HSTS, CORS)

Prerequisites & Environment

Web development basics

Complete Course Curriculum (11 Modules)

11 In-Depth Lessons

Module 01

Module 1: Information Security Principles (CIA Triad)

1 Lessons

Confidentiality, Integrity, Availability, Defense-in-Depth, and Principle of Least Privilege.

1.1The CIA Triad & Core Defensive Principles

Module 02

Module 2: Network Security & TCP/IP Protocols

1 Lessons

OSI model, TCP 3-way handshake, DNS security, firewalls, and port scanning.

2.1Network Defense: TCP Handshake, DNS & Firewalls

Module 03

Module 3: Cryptography: Symmetric vs Asymmetric

1 Lessons

AES-256 encryption, RSA/ECC public-key cryptography, key exchange, and digital signatures.

3.1Symmetric (AES) vs Asymmetric (RSA/ECC) Cryptography

Module 04

Module 4: Hashing & Secure Password Storage

1 Lessons

Cryptographic hash functions (SHA-256), Rainbow Tables, Salts, and bcrypt/Argon2.

4.1Password Hashing with Bcrypt & Argon2

Module 05

Module 5: HTTPS, TLS Handshakes & SSL Certificates

1 Lessons

HTTP vs HTTPS, TLS 1.3 handshake, Certificate Authorities (Let's Encrypt), and Public Key Infrastructure.

5.1HTTPS & The TLS 1.3 Handshake Protocol

Module 06

Module 6: Web App Security & OWASP Top 10

1 Lessons

The Open Web Application Security Project (OWASP) Top 10 vulnerabilities overview.

6.1OWASP Top 10 & Web Application Defenses

Module 07

Module 7: SQL Injection (SQLi) & Parameterization

1 Lessons

Classic SQL injection, blind SQLi, OR 1=1 exploits, and parameterized prepared statements.

7.1SQL Injection (SQLi) & Parameterized Queries

Module 08

Module 8: Cross-Site Scripting (XSS) & Mitigation

1 Lessons

Stored XSS, Reflected XSS, DOM-based XSS, context escaping, and React auto-escaping.

8.1Cross-Site Scripting (XSS): Stored, Reflected & DOM

Module 09

Module 9: CSRF, SSRF & Broken Access Control

1 Lessons

Cross-Site Request Forgery, SameSite cookie attributes, SSRF, and Insecure Direct Object References (IDOR).

9.1CSRF, IDOR & Server-Side Request Forgery (SSRF)

Module 10

Module 10: HTTP Security Headers (CSP, HSTS, CORS)

1 Lessons

Content Security Policy (CSP), Strict-Transport-Security (HSTS), X-Frame-Options, and CORS.

10.1Content Security Policy (CSP) & HTTP Security Headers

Module 11

Module 11: Authentication, OAuth 2.0 & Threat Modeling

1 Lessons

OAuth 2.0 / OpenID Connect authorization code flow, PKCE, STRIDE threat modeling, and zero trust.

11.1OAuth 2.0 (PKCE), Multi-Factor Auth & STRIDE Threat Modeling