Web Development
You can't hack what you don't understand. This roadmap gives you the developer's perspective on web applications: how HTTP works, how sessions and cookies are managed, how APIs are designed, and how authentication flows are implemented.
📋 Lessons (9 total)
Understand the full request-response cycle: DNS resolution, HTTP/HTTPS, TCP handshakes, status codes, and browser rendering.
Build the structure of web pages with semantic HTML5: elements, attributes, forms, tables, and accessibility best practices.
Style web pages with CSS: selectors, the box model, Flexbox, responsive design, and CSS variables for maintainable stylesheets.
Learn JavaScript fundamentals: variables, types, functions, arrays, objects, and control flow — the engine behind interactive web pages.
Select, modify, and create DOM elements with JavaScript, and respond to user actions through event listeners — the core of interactive web UIs.
Handle form submission in JavaScript, implement client-side validation, and communicate with APIs using the Fetch API and async/await.
Build server-side web applications with Node.js and the Express framework — routes, middleware, request handling, and JSON APIs.
Design and consume RESTful APIs: resource naming, HTTP methods, status codes, authentication patterns, and API security basics.
A capstone review process: validate-input/encode-output, insecure framework defaults, a structured code review checklist, and dependency scanning as secure coding, not just ops.
Know What You're Attacking
To hack web applications, you must first understand how they work from the developer's perspective.
What You'll Learn
- ✓ Understand how web applications are built
- ✓ Master HTTP/HTTPS and web communication
- ✓ Understand sessions, cookies, and authentication
- ✓ Use browser Dev Tools for analysis
- ✓ Build and test REST APIs