$ man appsec
Learn AppSec
The same vulnerability classes you grind through in the game, explained for real — video content covering application security topics, one bug class at a time.
# Videos
Lineup in progress — check back soon.
OWASP Top 10 2025 Explained
The OWASP Top 10 2025 is the definitive list of the most critical web application security risks.
placeholder
Coming soon: IDOR Deep Dive
Finding and fixing broken object-level authorization.
placeholder
Coming soon: XSS from First Principles
Reflected vs. stored, and how to actually stop it.
placeholder
Coming soon: SQL Injection in 2026
Why this bug class refuses to die.
placeholder
Coming soon: SSRF Fundamentals
Tricking servers into making requests they shouldn't.