Since September 2026
Instructor since September 2026
This course is aimed at beginners and students who wish to understand web cybersecurity in a practical, progressive and structured way.
The goal is not to learn techniques by heart, but to understand how a web application works and how to reason when faced with a security problem.
We will be discussing, in particular:
• the basics of HTTP: requests, responses, methods, cookies and sessions;
• Authentication vs. Authorization;
• Getting started with Burp Suite Community;
• Broken Access Control;
• IDOR and BOLA;
• horizontal and vertical privilege escalation;
• roles, permissions and ownership;
• Security API basics;
• bug bounty methodology;
• drafting a clear vulnerability report.
The exercises are performed in dedicated learning labs, CTFs, or explicitly authorized environments.
My method is based on a simple line of reasoning:
Actor → Action → Object → Expected Authorization
Each session alternates between explanations, demonstrations, practical exercises with Burp Suite and guided correction.
The program can be adapted to the student's level, from the discovery of Web cybersecurity to the first methodologies of BAC/IDOR vulnerability research.
The goal is not to learn techniques by heart, but to understand how a web application works and how to reason when faced with a security problem.
We will be discussing, in particular:
• the basics of HTTP: requests, responses, methods, cookies and sessions;
• Authentication vs. Authorization;
• Getting started with Burp Suite Community;
• Broken Access Control;
• IDOR and BOLA;
• horizontal and vertical privilege escalation;
• roles, permissions and ownership;
• Security API basics;
• bug bounty methodology;
• drafting a clear vulnerability report.
The exercises are performed in dedicated learning labs, CTFs, or explicitly authorized environments.
My method is based on a simple line of reasoning:
Actor → Action → Object → Expected Authorization
Each session alternates between explanations, demonstrations, practical exercises with Burp Suite and guided correction.
The program can be adapted to the student's level, from the discovery of Web cybersecurity to the first methodologies of BAC/IDOR vulnerability research.
1st lesson is backed
by our Good-fit Instructor Guarantee
by our Good-fit Instructor Guarantee