Diving into the "Understanding the OWASP® Top 10 Security Threats (SKF100)" course

marcoatl

Hello everyone! 👋

I'm currently diving into the "Understanding the OWASP® Top 10 Security Threats (SKF100)" course and finding it incredibly insightful. This course is deepening my understanding of critical web application vulnerabilities and how to mitigate them effectively.

Feel free say Hi or to introduce yourselves—I'd love to know what brought you here! Also, let’s discuss tools, techniques, or even experiences related to OWASP. If you have questions or ideas, share them here! Let’s make this forum a great resource. 😊. Thank you in advance.

"In a deep ocean, we can alwaysfind a way to keep going and move forward to survive."
Regards.
Marco Trejo.

mirko.gonzalezv

Hi! everyone!

i'm currently take this course. i hope that help me to understand this world of cybersecurity, i am senior full stack developer, with knowledge in Flutter, Angular and NestJS, but i need expand my knowledge with this topics.

I am from Chile, but live in Colombia from this Year, i love my career and I need to learn a lot more.

Regards
Mirko Andres Gonzalez Vásquez

zcdurkiewicz

Hey Mirko! I recently started this course - I really enjoy the content. I wondered if the labs work for you? Burp Suit does not load the labs environment at all for me (no POST requests at all).

reinouts

Hello. I have reached Lab 4.1 about insecure randomness but I'm stuck. I'm running the owasp-skf-lab:threatmodeling container on my machine.
The instructions ask me to run pip3 install -r requirements.txt but where do I find the requirements.txt file? It's not in the Resources submenu on the left, nor can I find it when I open a terminal inside the container.

fcioanca

Hi @reinouts

Please check out the Course Resources tab on the Course Support and Other Resources page, where you can find details on how you can access the files.

Regards,
Flavia
Linux Foundation Education

reinouts

The instructions ask me to run pip3 install -r requirements.txt but where do I find the requirements.txt file? It's not in the Resources submenu on the left, nor can I find it when I open a terminal inside the container.

After some experimenting, I have found that the Python script needs the 'requests' package, which is the only line in requirements.txt that is needed.

Still, I find Step 2 in the lab confusing. I tried to post the form values automatically by changing the script a little and I believe I succeeded after figuring out that the POST request needs a Content-Type: application/x-www-form-urlencoded header, but it's hard to validate.

reinouts

Hi Flavia,

Please check out the Course Resources tab on the Course Support and Other Resources page, where you can find details on how you can access the files.

Do you have a link for me? When I'm in the Training Portal and click the link 'Contact Support' it leads me to a generic support portal. I do not see a Course Support and Other Resources page anywhere.

fcioanca

Hi @reinouts

It's in the course menu, first chapter. Please see the screenshot below:

Best,
Flavia

reinouts

Didn't see it until now, I was looking under Resources. Thanks.

msanchezp

Hola!

Comencé hace poco este curso y tengo muchas espectativas positivas en el desarrollo de cada módulo, para fortalecer mis conocimientos y perfil profesional.