Attack deliberately vulnerable HackerSkool web applications and learn how the weaknesses are repaired.
requests, responses, headers, cookies and sessions
login systems and access control
unsafe input and database interaction
client-side trust boundaries
work through intentionally vulnerable applications