This is not a theory lecture. In this workshop, you will actively attack and defend a series of applications. We will dive into the code to identify, exploit, and remediate critical security vulnerabilities. You'll walk away with a practical methodology for prioritizing threats using application context and the OWASP ASVS, transforming your approach to secure development. All you need is a browser and an internet connection.