Browse › Introduction To OWASP Top Ten

OWASP Top Ten 2025 - A06 Insecure Design
Part of Introduction To OWASP Top Ten Topic: Web Hacking
Access
Included in StationX Membership — unlimited attempts
🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
Already have access? Sign in.
New to this? Try a free practice lab — a scripted hacking challenge in your browser, no account needed.
What you'll do
This lab explores the "A06:2025 Insecure Design" vulnerability of the OWASP Top Ten and focuses on identifying security weaknesses introduced during the design phase of an application.
- Students will analyze workflows and trust boundaries to uncover flawed logic and missing controls, emphasizing the importance of secure design principles and threat modeling.
- ⏱ About 60 minutes
- Counts towards: Certified Ethical Hacker (exam CEH) · CompTIA PenTest+ (exam PT0-003) · CompTIA SecAI+ (exam CY0-001) · OffSec Certified Professional (exam OSCP)
Roadmaps that use this lab
- CompTIA PenTest+ (PT0-003) — step 4: Web application testing
- Certified Ethical Hacker (CEH) — step 5: Web and application attacks
- OffSec Certified Professional (OSCP) — step 4: Web attack chains
- CompTIA SecAI+ (CY0-001) — step 3: Securing AI systems
- Penetration Tester — career path — step 4: Web application attacks
- Penetration Tester — career path — step 7: Certify it
- AI Security Engineer — career path — step 3: The AI security certification









