Innomerc Learn
English is the default.
Guided learning path

Web and application security

Understand identity and requests before exploring security failures.

13 lessons · Approximately 77 minutes · Learn at your pace

Before you start: From Your Browser to a Website, HTTP and HTTPS Explained, Databases, Records and SQL Before Injection

  1. Databases, Records and SQL Before InjectionUnderstand tables, queries and transactions before studying database attacks.7 minLesson
  2. Authentication vs AuthorizationIdentity answers who is making a request. Authorization decides whether that identity may perform this action.6 minLesson
  3. Cookies and SessionsSee how an HTTP cookie can connect separate requests to server-side session state.6 minLesson
  4. JWT ExplainedInspect the header, claims and signature of a token—and see why decoding is different from trusting.6 minLesson
  5. OAuth ExplainedFollow delegated access from a client to an authorization server without sharing the user’s password.6 minLesson
  6. OWASP Top 10 OverviewExplore the current web application risk categories and connect them with specific failures and defenses.6 minLesson
  7. A01 · Broken Access ControlCompare an allowed request, an ownership failure and a server-enforced denial in the same application.6 minLesson
  8. SQL InjectionSee what happens when data changes query structure, then separate the statement from its parameters.6 minLesson
  9. Cross-Site ScriptingFollow untrusted text into a browser and compare interpreting markup with rendering plain text.6 minLesson
  10. Server-Side Request ForgerySee how a user-controlled destination can make a server cross a network trust boundary.6 minLesson
  11. API Security FundamentalsProtect the identity, object, property, operation and resource cost behind every API request.6 minLesson
  12. Keep Service Secrets Out of CodeFollow an application credential from issuance to use, rotation and revocation.5 minLesson
  13. Retry a Request Without Repeating the ActionUnderstand how an operation identifier helps distinguish a retry from a new action.5 minLesson

Bring it together

Explain one idea from this path in your own words. Revisit any lesson that still feels uncertain; completion is your choice, not a timer.

Review your learning · Choose another path