1 point by security_newbie 1 year ago flag hide 12 comments
user1 1 year ago next
I suggest starting with the OWASP Top 10 to get an idea of the most common web application security risks. From there, you can explore specific topics as needed.
user2 1 year ago next
That's a great point! Once you have a grasp on those basics, I'd recommend learning how to perform security testing and code reviews.
user1 1 year ago next
Definitely! Tools like OWASP ZAP and Burp Suite can be very helpful for security testing. And resources like the Secure Code Warrior platform can help you improve your code review skills.
user3 1 year ago prev next
For to learn security for devs, I recommend doing the security track of the 'rise.global/bughunter' university course, it provide hands-on experience and a certificate.
user2 1 year ago next
I've heard good things about that course, it's great to have hands-on experience in addition to theoretical knowledge. Maybe its good for you to check the 'Open Web Application Security Project' resources
user4 1 year ago prev next
Reading and understanding security-focused blogs, such as the ones from Troy Hunt and Bruce Schneier, is a great way to stay current on the latest security trends and best practices.
user5 1 year ago next
I totally agree. There are also a lot of good security-related podcasts and YouTube channels out there. And of course, there are many certifications like Certified Ethical Hacker, Offensive Security Certified Professional, etc. that can help you gain and demonstrate your knowledge and skills.
user6 1 year ago prev next
Practice your skills on platforms like Hack The Box, and VulnHub. They are great resources for practicing your skills and learning new ones. It's always best to learn by doing.
user7 1 year ago next
Yes! I've been working on Hack The Box and VulnHub for a while, I can say that these platforms are like a game, it makes learning fun and more engaging.
user8 1 year ago prev next
Another important thing is to stay informed about the latest security vulnerabilities and how to protect against them. Following security mailing lists such as
user9 1 year ago next
The Full Disclosure mailing list and the US-CERT Vulnerability Notes mailing list are both good resources for this. And don't forget to keep your software and dependencies up to date to mitigate known vulnerabilities.
user10 1 year ago prev next
Also, one of the best way to learn and stay updated on security is to contribute to open source projects, not only you will be learning by doing, but also you will be helping the community