Module 01: Introduction and Basic of Web Security
Module 02: SQL Injection
Module 03: Code Injection
Module 04: Unrestricted Upload of File with Dangerous Type
Module 05: Inclusion of Functionality from Untrusted Control Sphere
Module 06: Missing Authentication for Critical Function
Module 07: Improper Restriction of Excessive Authentication Attempts
Module 08: Use of Hard-coded Credentials
Module 09: Reliance on Untrusted Inputs in a Security Decision
Module 10: Missing Authorization
Module 11: Incorrect Authorization
Module 12: Missing Encryption of Sensitive Data
Module 13: Cleartext Transmission of Sensitive Information
Module 14: XML External Entities
Module 15: External Control of File Name or Path
Module 16: Improper Authorization
Module 17: Execution with Unnecessary Privileges
Module 18: Use of Potentially Dangerous Function
Module 19: Incorrect Permission Assignment for Critical Resource
Module 20: Improper Neutralization of Input During Web Page Generation (‘CrossSite Scripting’)
Module 21: Use of Externally-Controlled Format String
Module 22: Integer Overflow or Wraparound
Module 23: Use of a Broken or Risky Cryptographic Algorithm
Module 24: Use of a One-way Hash Without a Salt
Module 25: Insufficient Logging and Monitoring
Module 26: Download of Code Without Integrity Check