OWASP Top 10 in 10 Min! (Kinda)

Purchase my Bug Bounty Course here 👉🏼 bugbounty.nahamsec.training
This video was sponsored by Detectify (detectify.com)
Buy Me Coffee:
www.buymeacoffee.com/nahamsec
Live Every Sunday on Twitch:
/ nahamsec
Free $100 DigitalOcean Credit:
m.do.co/c/3236319b9d0b
Follow me on social media:
/ nahamsec
/ nahamsec
twitch.com/nahamsec
hackerone.com/nahamsec
/ nahamsec1
Github:
github.com/nahamsec
Nahamsec's Discord:
discordapp.com/invite/ucCz7uh
0:00 Intro
2:30 A1: Broken Access Control
3:56 A2: Cryptographic Failures
4:35 A3: Injections
6:41 A4: Insecure Design
8:30 A5: Security Misconfiguration
10:06 A6: Vulnerable and Outdated Components
11:30 A7: Identification and Authentication Failures
12:42 A8: Software and Data Integrity Failures
14:02 A9: Security Logging and Monitoring Failures
14:49 A10: Server-Side Request Forgery (SSRF)
17:35 Resources

[@subinthomson3018]

u being very genuine and straight forward to the point no buttering .. i liked it..all the best.

[@pathfinder750]

Realy liking the new content Nahomie

[@evils3rg3n]

Great video! I'm currently working on my dissertation on owasp top ten and penetration testing and this helped a lot 👌

[@rodricbr]

really well explained, thank you

[@itsme7570]

Clean fade nahamsec! Nice video

[@adyp487]

Really nice and helpful! ❤️

[@maanzero6245]

Thank you for your big efforts ❤

[@ecotoser]

great video man lots of helpful info

[@ArminFreak]

That was dope man, Thank you

[@j4ck_d4niels]

Awesome content man :)

[@nagrajcool]

We like this type of content easy to understand within less time

[@nelaina]

Thank you for this. I'm just starting to learn cyber and trying to absorb everything, even if I don't quite understand it, somehow I can still follow. You're a really good teacher and great at breaking things down. 🙂

[@NahamSec]

Glad you enjoyed it!

[@bitcode_]

awesome content!

[@Sabyas_Hub]

Very insightful.

[@meljithpereira5532]

This is awesome Man (pair of shoes)

[@ahmadfaisal6356]

this is kind of video that i like

[@smar3tech343]

I enjoy everything u said the more I known the more I learn I enjoy technology 🙏👍👩‍💻

[@darshankaiyalkar5524]

Best explanation thanks ....

[@MuhammadImran-uz6vz]

Just imagine if Naham makes 10 hours long course on Pen testing. it wouldn't be just day made, rather Life made :)

[@MexiChriS]

Kinda 10min video… 😂 thanks!

[@smar3tech343]

I have a ? What’s the difference between cyber analysis & cyber security im just wondering bc I really want to get into those fields

[@skselim8536]

Tons of love from India 🇮🇳❤

[@puti1707]

🎉

[@user-ui3kf2fr3y]

I couldn't agree more, OWASP should release something Exploitable and Code Failure in terms of category. Under Top 10, it's really difficult to pitch or educate on a security-centric development. OWASP 2021 is suggestion driven unlike it's predecessor, where the good practice is more recommended then the actual vulnerability. Looking for a new release with the volume of automated/no-coding applications. This time at least few should direct the AI/ML impact.

[@jruok]

He’s so cute, I wish he were my mentor lol

[@elite_fitness]

You must have held on to this video for a while, you said 2021 it's year 2022 buddy lol

[@loneliestwolf4228]

You have always been like a torchbearer for me....

[@tharanitharan2925]

Can we expect Fara hawa one again 🙏 in this show

[@sand3epyadav]

Ippsec

[@TheConstantLearnerGuy]

:)

[@ashleypursell9702]

"insecure design" the new name for kids that are insecure that need to buy supreme shoes . . . come at me

[@NahamSec]

ooooof hahah

[@generalinformation3194]

اريد ان اسألك هل انت عربي لماذا لا تقوم بتعليمنا باللغة العربية فالعرب بحاجة الى شخص مثلك

[@test011]

No thanks god, he is not an arab