OWASP A5 – Broken Access Control

This module describes what incorrect implementation of authentication and session management functions are, and explains how it can allow attackers to assume other users’ identities.

This lesson covers how XXE attacks are executed, and how to prevent those attacks on your applications.

This module covers insufficient logging and monitoring.