05Secure Code Review
Read code like an attacker and fix it like a defender: input validation, authentication, authorization, cryptography, error handling, sessions and common web flaws.
- 17 live classes
- Taught in Telugu
- 1 hour each
- Certificate
After this course, you can…
01
Spot vulnerabilities by reading backend code
02
Recommend the exact code fix, not just the finding
03
Fit code review into the development lifecycle
Every topic you'll cover.
11 modules · 48 topics.
01Understanding Backend Code Issues4 topics
- Authentication bypass and the reason behind it
- Fixing code to prevent authentication bypass
- Direct object reference issues and fixes in code
- Backend directory leaks and keeping them safe
02Fundamentals of Software Security3 topics
- Basics of secure software development
- Common security principles and best practices
- The OWASP Top 10 from a developer’s view
03Code Review Methodology3 topics
- Establishing a structured review process
- Techniques for reviewing code effectively
- Code review in the software development lifecycle
04Secure Coding Guidelines & Standards3 topics
- Coding standards and secure coding guidelines
- Industry standards such as CWE
- Applying secure coding practices
05Static Analysis Tools3 topics
- Introduction to static analysis for code review
- Configuring popular code analysis tools
- Analysing results to find real vulnerabilities
06Basic Code Review Testing6 topics
- Input validation
- Authentication
- Authorization
- Cryptography
- Error handling
- Session management
07Secure Authentication & Authorization3 topics
- Reviewing authentication and authorization mechanisms
- Common authentication vulnerabilities
- Secure session management and access control
08Secure Data Handling3 topics
- Secure storage and encryption
- Input validation and sanitisation
- Preventing sensitive data exposure
09Error Handling, Logging & Configuration4 topics
- Error handling vulnerabilities
- Secure logging practices
- Secure configuration management
- Common misconfigurations and their impact
10Challenges & Remediation3 topics
- Practical code review exercises
- Recommending remediation
- Communicating findings and mitigations
11Common Vulnerabilities in Code13 topics
- CSRF
- Cookie hijacking
- Error handling
- IDOR
- LDAP injection
- LFI and RFI
- Directory and path traversal
- Open redirection
- SQL injection
- SSRF
- Password storage
- Session hijacking
- XSS
Free live demo
See it live before you join.
Saturday 6–7 PM · Sunday 11 AM–12 PM · Sunday 7–8 PM (IST). Fees and batch dates are shared in the demo.