Security courses

Browse public Security courses with structured lessons, visuals, and practice on Wondering.

• HTTP Protocol Internals & Offensive Semantics

  Train an experienced web/API pentester and bug bounty hunter to predict vulnerabilities that arise when two components interpret the same HTTP message differently. Assume fluency with HTTP requests, Burp Suite, common web vulnerabilities, TLS, proxies, APIs and web architecture, and never re-explain them. Use RFC 9110 as the semantic backbone, then RFC 9111, 9112, 9113, 9114, 9204, 9213, 9421, 9530, 9651, 7239 and 6265. Every lesson must state the precise protocol mechanic, distinguish normative HTTP behaviour from implementation behaviour, connect it to real infrastructure (CDN, WAF, load balancer, reverse proxy, API gateway, framework, application), and answer: what could two parsers disagree about here? Show raw request and response bytes rather than describing them. Name real implementations whose behaviour differs. End every lesson with a concrete test the reader can run against a live target and the observable that decides the result. Label claims as established, inferred, or controversial. No fluff, no filler, no generic web-security advice.

• Evaluating AI Biotech Legal Risks

  Master the legal complexities of AI-driven drug discovery to protect your investments and navigate evolving intellectual property frameworks when partnering with biotech innovators. * **Identify AI-generated patentability** and inventorship hurdles * **Analyze liability risks** in AI-driven drug discovery models * **Audit data privacy compliance** for biological datasets * **Assess IP strength** for biotech investment due diligence

• Real-Time Ad Event Pipelines: Lessons from Netflix

  Understand how to design scalable event enrichment pipelines using streaming joins, choose the right delivery guarantee per layer, and safely migrate a revenue-critical production system without downtime

• Blockchain Essentials for Financial Investigators

  Master the art of tracing illicit digital assets by applying your existing investigative logic to the world of cryptocurrency through simple, non-technical analogies. * **Trace illicit fund flows** across public blockchain ledgers * **Identify key entities** by analyzing wallet addresses and patterns * **Master crypto terminology** through simple non-technical investigative analogies * **Document digital evidence** for academic research and legal proceedings

• Autonomous Agent Security Incidents

  Learn how the reported OpenAI–Hugging Face incident unfolded, why coordinated AI agents changed the security dynamics, and what defenders should do about fully automated offense.

• Using AI Safely at Work

  What happens to what you paste, how a document can hijack a model, whose assumptions you inherit, when you have to disclose, and what the rules actually require.

• Can a document I upload hijack the AI?

  Prompt injection. Recognise an injection attempt, and name which of your own AI setups could actually act on one.

• Is what I paste being used to train it?

  Where your data goes. Determine, for the specific tool you actually use, whether your inputs are retained or trained on, and state the boundary for what you paste.

• It's acting on its own. Where do I put the brakes?

  Agents, tools, and checkpoints. Read an agent's step trace and place human checkpoints where a mistake would be expensive or irreversible.