Hacking and Hardening Java Web Application Workshop This is a tutorial for learning Java Web Application Security. 0 - Set Up 1 - App Scanning with ZAP 2 - SQL Injection with sqlmap 3 - Cross-site scripting (XSS) 4 - Cross-Site Request Forgery (CSRF) 5 - Access Control 6 - Know Vulnerabilities using Metasploit & Sonatype App Scan 7 - Security Misconfigurations