Attacking and Securing .Net Web Applications is a lab-intensive, hands-on .Net security training course that provides unique coverage of .Net application security. In this course, students begin with penetration testing, hunting for bugs in .Net web applications. They then thoroughly examine best practices for defensively coding web applications, covering all the OWASP Top Ten as well as several additional prominent vulnerabilities (such as file uploads, CSRF and direct object references).  Students will repeatedly attack and then defend various assets associated with fully functional web applications and services.  This hands-on approach drives home the mechanics of how to secure .Net web applications in the most practical of terms.  The course ends with an extensive discussion of what a mature application security presence would provide to the developers within an organization.

Please note this class uses the latest version of .Net Core / Version 6.