inflearn logo

Hands-On Web Security Practice: Attack and Fix It Yourself, Part 1 — Beginner: Learn the OWASP Top 10:2025 with Spring Boot

Why is my service vulnerable? In a Spring Boot shopping mall, I reproduce IDOR, path traversal, SQL injection, stored XSS, and security misconfigurations firsthand, pinpoint the causes through requests and logs, fix them using vetted libraries, and verify the fixes with test code.

3 learners are taking this course

Level Basic

Course period Unlimited

Java
Java
PostgreSQL
PostgreSQL
Spring Boot
Spring Boot
JUnit
JUnit
Spring Security
Spring Security
Java
Java
PostgreSQL
PostgreSQL
Spring Boot
Spring Boot
JUnit
JUnit
Spring Security
Spring Security

What you will gain after the course

  • You can start the local practice environment and restore it to its initial state.

  • Recreate five issues related to access control, injection, and security misconfiguration in a hands-on lab environment.

  • We can correlate screens, requests, and server logs using request IDs to explain the cause and impact.

  • I can fix vulnerable code and configurations using proven libraries and explain why those changes are needed.

  • Use JUnit and MockMvc tests to ensure attacks are blocked while normal functionality is preserved.

  • Prepare a security improvement report detailing the reproduction evidence, improvements made, and revalidation results.

Recommended for
these people

Who is this course right for?

  • A junior web developer who has built login, forum, and API features with Spring, but has only a vague understanding of security.

  • Security beginners who want to learn web vulnerabilities and log analysis together (those who can read Java code)

  • Operations personnel who need to discuss the root cause of the vulnerability and remediation plans with the development team

Need to know before starting?

  • You should be able to read basic Java syntax and understand the controller-service-repository structure of Spring MVC.

  • Experience running simple SQL queries and terminal commands is required.

  • No Docker experience is required. Installation and running it are covered in Lesson 0-2.

Hello
This is may9noy

Career Verified

3,027

Learners

387

Reviews

27

Answers

4.4

Rating

18

Courses

Hello. 😄

Sometimes I get exhausted from burnout due to childcare and work, 😅

I am an IT worker living each day with gratitude and a joyful heart. 😅


Personal Blog : https://may9noy.tistory.com

GitHub : https://github.com/Nanninggu


I wish you a life and home always filled with good things. 😀

More

Curriculum

All

27 lectures ∙ (3hr 14min)

Course Materials:

Lecture resources
Published: 
Last updated: 

Reviews

Not enough reviews.
Please write a valuable review that helps everyone!

may9noy's other courses

Check out other courses by the instructor!

Similar courses

Explore other courses in the same field!

Limited time deal

$34,650.00

30%

$38.50