High quality, handwritten flashcards about web application weaknesses as downloadable DRM‑free files.
For learning and building secure software.
Learning Has Never Been More Fun
Each flashcard covers exactly one web application weakness and contains a description of the weakness as text and as a visualization. This combination creates a unique learning experience which allows the brain to remember the learned stuff much easier than compared to traditional learning methods.
Build More Secure Software
Use the cards in your company. Replace boring and demotivating security checklists with a unique security check experience.
Use the cards to gamify the Sec part of your
DevSecOps strategy.
For instance, identify relevant cards for your software and check that each weakness is mitigated for each change.
45 Weaknesses
The cards cover 33 common web application security weaknesses (e.g. SQL injection, open redirect, insecure deserialization, path traversal, insecure direct object reference, HTTP verb tampering, cross-site scripting, improper input validation, etc) and 10 machine learning weaknesses.
Get Updates for Free
I regularly add new flashcards to the deck and fix mistakes. Whenever an updated card deck is available you can download that card deck for free.