Learn how real web applications are attacked and how to stop it.
Modern web applications are complex, fast-moving, and constantly exposed. This hands-on workshop introduces participants to the most common and impactful web application attack techniques, while providing the methodology and tooling needed to assess real-world applications from an attacker’s perspective.
Designed for developers and junior security engineers, the training focuses on building strong fundamentals rather than diving too deeply into isolated vulnerabilities. Participants will learn how to think like an attacker, how to identify entry points, and how vulnerabilities are chained together, while continuously linking each attack to its defensive implications.
By the end of the workshop, attendees will have a solid mental framework to analyze web applications, understand common failure patterns, and communicate risks more effectively within development or security teams.
Hands-on by design
This is a practical, lab-driven workshop. Concepts are demonstrated live and immediately applied using real tools and scenarios, including a final Capture-the-Flag exercise to reinforce learning in a realistic and engaging way.
