OWASP Top 10 - A06:2021 - Vulnerable and Outdated Components

Overview

Our newest OWASP courses contain exclusive content updates for the September 2021 version of the OWASP Top 10 list.

In the A06-Vulnerable and Outdated Components course, you'll learn more about the infamous 2017 Equifax Breach and the Apache Struts vulnerability that started it all.

Our OWASP Top 10 course is designed for intermediate-level learners, including seasoned offensive security professionals, SOC analysts, and Windows system administrators who want to exploit and protect against the latest vulnerabilities impacting enterprise systems.

To gain the most benefit from this course, you should have a basic understanding of:

• Web applications
• Programming languages
• Web browsers
• Web application hacking

The Open Web Application Security Project (OWASP) is a non-profit organization focused on web security. The OWASP Top 10 features the most critical web application security vulnerabilities. Our course provides the knowledge needed to identify, exploit, and offer remediation suggestions for these vulnerabilities.

This course is available on the Cybrary platform in a series of installments. Along with an introductory module, each of the subsequent 10 modules are contained separately as installments of the course series. The multimodal design allows for more self-paced, customizable learning. Our on-demand format affords you the flexibility to learn at your own pace.

This course was developed by Clint Kehr, a technical manager for a financial services company's Responsible Disclosure Team. He interacts with ethical hackers who find vulnerabilities in the company’s infrastructure. Clint is a former Special Agent with the Department of Justice and has extensive experience in internet investigations.

Cybrary is the first cybersecurity education platform to release exclusive, updated course content for the new OWASP Top 10 list as of September 24th, 2021. The list has been significantly revised since the 2017 edition, with combined, reordered, and newly added web application vulnerabilities. OWASP's focus is on more data-centered research for the new list.

Each Cybrary OWASP Top 10 (2021) course includes:

• Engaging video overview lessons summarizing each category and the list of CVEs covered, detailing changes from the 2017 list
• Guided demos in platforms such as OWASP Mutillidae
• Written scenarios highlighting the relevance of the OWASP Top 10 web application vulnerabilities in real-world ransomware attacks and data breaches, including the 2021 Colonial Pipeline Hack and the 2017 Equifax Breach
• Custom hands-on labs created by our partner, Cydefe, to identify, exploit, and mitigate these critical vulnerabilities, and offer remediation advice

Syllabus

Taught by

Clint Kehr

Tags