Web Security

This course provides a structured introduction to web application security through a combination of concise theory and hands-on exercises. It is designed for learners with basic familiarity with web technologies and general cybersecurity concepts who want to develop practical skills in identifying and exploiting common web vulnerabilities. The course covers how web applications work at a fundamental level, including the HTTP protocol, and examines both server-side and client-side security issues. Topics include input validation flaws, file handling vulnerabilities, injection attacks, authentication and logic weaknesses, and browser-based attacks. Practical learning is delivered through a series of progressively challenging exercises that simulate real-world scenarios, where participants are required to analyse application behaviour, identify weaknesses, and apply appropriate exploitation techniques. After completing the course, participants will be able to systematically assess web applications for common security flaws, understand how these vulnerabilities can be exploited, and interpret the impact of successful attacks.