Secure your codebase, safeguard your applications

OffSec Learning Path: Intermediate Secure Software Development I

Fortify web applications and explore proven techniques to safeguard software and systems. Learners will:

Master cryptography and secure coding for resilient applications.
Practice integrating security throughout the software development cycle.
Defend against real-world attacks through hands-on practice.

Get Started

Hero image for Secure your codebase, safeguard your applications

One of five secure software development Learning Paths

Introduction to Secure Software Development

Secure Software Development Essentials

Intermediate Secure Software Development I

Intermediate Secure Software Development II

OWASP Top 10 - 2021 Essentials

Deepen secure development expertise

Learners explore in-depth secure coding for web applications, session management, and cross-origin policies. Teams and individuals alike gain hands-on experience with debugging, attack methodologies, and common vulnerability mitigation.

Who is this Learning Path for?

Software developers
Security professionals responsible for application development
Offensive security professionals

Learning objectives

Strengthen and build upon core secure coding principles.
Reinforce learning with hands-on practice and real-world scenarios.
Develop vulnerability identification and mitigation skills.
Enhance software and system protection capabilities.

Key modules in the Intermediate Secure Software Development I Learning Path

Introduction to Web Secure Coding

Introduction to the concept of secure coding in web applications, including trust boundaries, input handling, output encoding, file handling, and parameterized queries.

Same-Origin Policy and CORS

Covers web origins, the Same-Origin Policy, and Cross-origin Resource Sharing.

Introduction to Templating Engines

Basics of what Templating Engines are and how they work

Understanding Directory Traversal

Introduction to directory traversal, including relative and absolute pathing, Apache Web Service, interesting system files, and directory listing.

Web Session Management

Introduction to secure session management, including authentication, authorization, passwords, session basics, cookie security, and single sign-on.

Introduction to Web Application Debugging

Introduction to web application debuggers, including common terminology, local debugging, and remote debugging.

Web Attacker Methodology

Introduction to web attacks, including main stages of an attack containing enumeration, vuln discovery, exploitation, post exploitation and reporting

View full syllabus

Intermediate Secure Software Development I overview

modules

hours of content (approx.)

15+

skills

Earning an OffSec Learning Badge

Showcase commitment to building secure applications! Upon completing 80% of the Intermediate Secure Software Development I Learning Path, you'll receive an exclusive OffSec badge. This badge:

Proves knowledge: Demonstrates proficiency in core secure coding concepts and vulnerability assessment.
Boosts credibility: Add an OffSec achievement to a learners skillset, whether you're an individual or promoting your team's capabilities.
Unlocks further learning: Motivates continued growth in the Secure Software Development learning path series.