Learn Application Security Testing in 2024

Have you wanted to start a career in Application Security, but you aren't sure where you start? In today's video, Tib3rius talks about how to build your foundation of knowledge and skills using free and paid resources as well as explaining why you need to do certain things and providing examples to help you on your journey.

0:00 Intro
0:49 Avoiding Content Overload
1:59 Learning the Fundamentals
3:00 Learning Programming
5:13 Learning Security Concepts
6:40 Learning Tools
8:42 Certs & Experience
10:49 Outro

📱Social Media📱
___________________________________________

💸Donate💸
___________________________________________
Like the channel? Please consider supporting me on Patreon:

Hacker Books:

My Build:

My Recording Equipment:

[DropeXK]

I love this video! Short, direct to the point and very informative :D

[AlexLucard]

I'd make one suggestion instead of learning Java. I would say you should learn JavaScript. I've been doing pen testing for a while and python and JavaScript have been the primary languages I use the most. The third would be powershell.

[shuh]

Very informative and cut to the point 👌🏼

[ugez]

Hi @Tib3rius, and thanks for this post.

These days when anyone talks about Application Security, I find it is just Web Application Security. Please shed some light on this.

[iftk]

Bash is also very helpful in automation.

[TeraQuad]

Love your work, TCM & Tib3rius.

What recommendation (tools and certification) do you have to improve auditing and compliance? Would Burp Suite or Snyk help (maybe for reporting, STIG/SRG, compliance or policy checks) even though they are DAST/SAST/RASP tools?

[Khanasad_]

This is best, most compressed and most detail video ..

did i contradict myself?

[vhsonacomeback]

Great video. Thank you for making this available.

Can you please let me know if it is possible to add links to the additional resources itemized by section in the description? I am not a content creator. I am genuinely asking.


Also, are there any plans to create a course related to secure source code review? Or, are there any courses where the focus is teaching me how to build my own intentionally vulnerable application in Java? I can't speak for anyone else, but I think that would help me understand how things work in the backend.

[mango-guxo]

you speak too quickly, i can not follow you.