Hacking and Hardening Java Web Application Workshop

This is a tutorial for learning Java Web Application Security.

0 - Set Up

1 - App Scanning with ZAP

2 - SQL Injection with sqlmap

3 - Cross-site scripting (XSS)

4 - Cross-Site Request Forgery (CSRF)

5 - Access Control

6 - Know Vulnerabilities using Metasploit & Sonatype App Scan

7 - Security Misconfigurations