Skip to content

Roadmaps Resources Practice Projects Journal Community

Search/Sign in

LearnPath

Learn anything. Build everything. Free, structured learning paths built from the best resources on the web.

Learn

Roadmaps
Skills
Resources
Practice

Build

Challenges
Projects
My learning
Search

Project

Journal
About & RRRTX Labs
Community
Open source
Privacy
Terms

LEARNPATH

Built by RRRTX Labs

Free and open source. No certificates. No paywall. No trackers.

Junior Cybersecurity Professional / Web vulnerabilities (OWASP)

Learn
Practice
Challenge
Prove
Not started

Junior Cybersecurity Professional

01Ethics, law & scope
02Security fundamentals
03Linux command line
04Networking basics
05Python syntax & types
06Git & GitHub
07Web vulnerabilities (OWASP)
08Cryptography basics
09Recon & OSINT (ethical)
10Vulnerability assessment
11Linux hardening
12Incident response basics

View the full graph →

Stage 02 · 02 · Core · skill 3 of 3

Web vulnerabilities (OWASP)

XSS, SQLi, CSRF, SSRF — as classes of bugs, practiced only in legal labs.

Recommended first: html-css, sql-fundamentals

After this you will be able to

Explain XSS vs SQLi in one sentence each
Use PortSwigger labs, never random websites
Fix the bug in your own code after exploiting the lab

Open PortSwigger Web Security Academy — XSS

PortSwigger · why we picked it

Completing this unlocks: Vulnerability assessment

Previous Next: Cryptography basics

Practice

No playground attached to this skill. The practice lab has every runtime.

Evidence

Learned
Practiced
Challenge passed
Used in a project

Not demonstrated yet

Notes

Notes