OWASP Top 10 & Common Attack Vectors with Java (1-5) | CodeSignal Learn

Skip to main content

intermediate

OWASP Top 10 & Common Attack Vectors with Java (1-5)

Security & Governance

Trusted by learners working at top companies

Turn screen time into skills time

Practice anytime, anywhere with our mobile app.

Sign up

Join the 1M+ learners on CodeSignal

Be a part of our community of 1M+ users who develop and demonstrate their skills on CodeSignal

5 courses

67 practices

10 hours

This learning path introduces new graduates to web application security through OWASP Top 10 vulnerabilities (1–5). Using Java, learners practice identifying and fixing common security issues in a simple web app to build strong, practical skills.

Earn a shareable

Certificate of Achievement

Verified skills you'll gain

DEVELOPING

API and Web Services Security

DEVELOPING

Secure Coding Practices and Code Review

Tools you'll use

curl

Java

Course 1

A01: Broken Access Control

5 lessons

16 practices

This course addresses flaws where improper enforcement of access restrictions allows unauthorized users to access or modify sensitive data or functionality, such as paste snippets or administrative pages, due to unverified input or missing role checks.

Course 2

A02: Cryptographic Failures

4 lessons

11 practices

This course explores vulnerabilities caused by improper cryptographic implementations or lack of encryption, leading to sensitive data exposure. You'll learn how attackers exploit weak cryptography and how to securely protect secrets, passwords, and sensitive information.

Course 3

A03: Injection

4 lessons

14 practices

This course demonstrates how injection flaws occur when untrusted data is used to construct queries, HTML content, or system commands. Learn to mitigate these risks through parameterized queries, server-side and client-side sanitization, input validation, and safe command execution patterns in our pastebin application.

Course 4

A04: Insecure Design

5 lessons

14 practices

This course explores design flaws that lead to security vulnerabilities in our pastebin application—from insecure credential recovery to flawed business logic and missing audit trails.

Course 5

A05: Security Misconfiguration

4 lessons

12 practices

This course highlights configuration errors—from leftover sample endpoints and directory listing to detailed error messages—that can expose the pastebin application to attackers.

Scan to download

Other paths you may like

Fundamental Coding Interview Prep with Python

Introduction to Programming with Python

Mastering Algorithms and Data Structures in Python

Advanced Coding Interview Preparation with Python

Full-Stack Engineering with JavaScript

Prompt Engineering for Everyone

Journey into Data Science with Python

Java Programming for Beginners

From our community

Hear what our customers have to say about CodeSignal Learn

I'm impressed by the quality and can't stop recommending it. It's also a lot of fun!

Francisco Aguilar Meléndez

Data Scientist

+11

I love that it's personalized. When I'm stuck, I don't have to hope my Google searches come out successful. The AI mentor Cosmo knows exactly what I need.

Faith Yim

Software Engineer

+14

It's an amazing product and exceeded my expectations, helping me prepare for my job interviews. Hands-on learning requires you to actually know what you are doing.

Alex Bush

Full Stack Engineer

+9

I'm really impressed by the AI tutor Cosmo's feedback about my code. It's honestly kind of insane to me that it's so targeted and specific.

Abbey Helterbran

Tech consultant

+8

I tried Leetcode but it was too disorganized. CodeSignal covers all the topics I'm interested in and is way more structured.

Jonathan Miller

Senior Machine Learning Engineer

+12

I'm impressed by the quality and can't stop recommending it. It's also a lot of fun!

name

Francisco Aguilar Meléndez

Data Scientist

+11

Company

About Careers Leadership Talent Science Newsroom

Collections

Generative AI Business & Leadership Interview Prep AI & Machine Learning Learn to Code Data Science & Engineering

Platform

Platform Overview Skills Assessments Live Tech Interviews AI Interviewer AI Role-Play AI Tutoring with Cosmo

Roles

Talent Acquisition Engineering Leaders Sales Leaders CS & Support Leaders IO Psychologists Individuals

Resources

Resource Library Blog Customer Stories Interview Prep API Docs

Support

Copyright © 2026 CodeSignal

Privacy Terms Compliance & Trust