01. Introduction to gRPC & HTTP/2 Security
Deep dive into gRPC architecture, HTTP/2 multiplexing, Protocol Buffers binary wire format, root causes of gRPC vulnerabilities, and threat landscape.
02. Core Security Concepts & Attack Vectors
Technical deep dive into gRPC attack vectors including mTLS misconfigurations, Metadata token leaks, Protobuf deserialization issues, Reflection exposure, and HTTP/2 DoS.
03. gRPC Attack Scenarios & Multi-Language Code Examples
Production code examples comparing vulnerable vs secure gRPC implementations across Go, Python, Node.js, and Java.
04. Production Defenses & gRPC Hardening
Production-grade mitigation strategies for gRPC services: mTLS with SPIFFE/SPIRE, Interceptor patterns, Protobuf validation, Envoy Gateway rules, and HTTP/2 hardening.
05. gRPC Security Tools & Auditing Frameworks
Complete guide to gRPC security testing tools, CLI utility usage, load/DoS testing, SAST rules, and automated vulnerability scanning.
06. Hands-on Vulnerability Lab: Exploiting & Securing gRPC
Self-contained, runnable gRPC security lab featuring a vulnerable microservice, automated Python exploit script, and step-by-step hardened remediation.
07. gRPC Security References & Standards
Comprehensive directory of gRPC security specifications, RFCs, OWASP mappings, CVE case studies, and official documentation.
gRPC Security Masterclass
Master gRPC security architecture, HTTP/2 attack vectors, mTLS, gRPC interceptors, protobuf validation, reflection hardening, and microservice identity.