Главная
Study mode:
on
You
History
Saved
In progress 0 courses
compleat 0 courses
#Art & Design #Adobe #ChatGPT #GitHub

#Browser Security

Showing: 95 courses
HackerSploit

OPSEC and Personal Security Guide - Cybertalk Episode 7

0 rewiews
Comprehensive guide on personal security and OPSEC, covering tools, techniques, and best practices to enhance digital safety and protect against cyber threats.
Add to list
21 Lesons
53 minutes
On-Demand
Free-Video
LASCON

Detecting and Controlling Rogue Third-Party Scripts in Web Applications

0 rewiews
Explore web supply chain attacks, their impact on sensitive data, and strategies to detect and prevent rogue third-party scripts from compromising web application security.
Add to list
1 Lesons
49 minutes
On-Demand
Free-Video
LASCON

Mind the CSP Gap: Challenges Developing a Meaningful Content-Security-Policy

0 rewiews
Strategies for implementing Content Security Policy (CSP) effectively, addressing challenges and phasing in a meaningful policy without disrupting engineering teams.
Add to list
1 Lesons
36 minutes
On-Demand
Free-Video
Association for Computing Machinery (ACM)

Mystique - Uncovering Information Leakage from Browser Extensions

0 rewiews
Explore privacy risks of browser extensions, uncovering information leakage through taint tracking and data flow analysis techniques.
Add to list
21 Lesons
23 minutes
On-Demand
Free-Video
White Hat Cal Poly

Browser Exploitation - Max Zinkus

0 rewiews
Explore JavaScript-based browser exploitation techniques, including XSS, JIT compilation vulnerabilities, and shellcode execution. Learn about browser security measures and how to find and chain exploits.
Add to list
15 Lesons
45 minutes
On-Demand
Free-Video

Security for the People: End-User Authentication on the Internet - Mark Stanislav

0 rewiews
Learn about end-user authentication security on the internet, covering two-factor deployments, browser security features, SSL/TLS implementations, and more. Gain insights into research methodology and lessons learned.
Add to list
14 Lesons
56 minutes
On-Demand
Free-Video

Practical Side Channel Attacks on Modern Browsers - Lecture 6

0 rewiews
Explore practical side channel attacks on modern browsers, covering XSS filters, timing attacks, clipboard vulnerabilities, and more. Learn about login history exploits and data URI schemes.
Add to list
15 Lesons
58 minutes
On-Demand
Free-Video

Out of Character Use of Punycode and Homoglyph Attacks to Obfuscate URLs for Phishing

0 rewiews
Explore techniques for URL obfuscation in phishing attacks, including punycode and homoglyphs. Learn about browser protections, registrar defenses, and strategies to mitigate these threats.
Add to list
18 Lesons
38 minutes
On-Demand
Free-Video
OWASP Foundation

Edgeguard: Client-side DOM Security Framework for Detecting Malicious Content - APPSEC Cali 2018

0 rewiews
Introducing Edgeguard: an open framework for detecting malicious content in browsers that steals sensitive user data. Learn about this zero-footprint library's approach to enhancing client-side DOM security.
Add to list
1 Lesons
40 minutes
On-Demand
Free-Video
OWASP Foundation

Beyond End-to-End Encryption: Threat Models for Secure Messaging

0 rewiews
Explore evolving threat models for secure messaging, covering advanced attacker capabilities, real-world vulnerabilities, and emerging challenges in cybersecurity and privacy protection.
Add to list
1 Lesons
44 minutes
On-Demand
Free-Video
OWASP Foundation

Exploiting CORS Misconfigurations for Bitcoins and Bounties - AppSec EU 2017

0 rewiews
Explore CORS misconfigurations and their security implications, including real-world attacks on bitcoin exchanges and Google. Learn about subtle vulnerabilities and exploit techniques for web security professionals.
Add to list
21 Lesons
37 minutes
On-Demand
Free-Video
OWASP Foundation

Trusted Types: End-to-End Injection Safety at Scale

0 rewiews
Learn about Google's approach to achieving high-level XSS safety through integrated tools and developer-friendly practices, with insights on implementing similar security in open-source stacks.
Add to list
1 Lesons
36 minutes
On-Demand
Free-Video
OWASP Foundation

Trusted Types: A World Without XSS

0 rewiews
Explore cutting-edge web security with Trusted Types, a powerful defense against XSS attacks. Learn implementation strategies and best practices from industry experts.
Add to list
1 Lesons
57 minutes
On-Demand
Free-Video
OWASP Foundation

HTTPS Everywhere: Improving Web Security and Usability

0 rewiews
Exploring Chrome's efforts to enhance HTTPS adoption: tools for debugging, reporting mechanisms for safe rollout, and strategies to improve web security.
Add to list
1 Lesons
41 minutes
On-Demand
Free-Video
OWASP Foundation

New Methods in Automated XSS Detection - Dynamic Testing Without Static Payloads

0 rewiews
Explore innovative dynamic methods for automated XSS detection without static payloads, including techniques for Stored XSS and custom exploit generation. Learn to overcome limitations of traditional approaches.
Add to list
27 Lesons
41 minutes
On-Demand
Free-Video
OWASP Foundation

OCSP Stapling in the Wild - Lecture

0 rewiews
Explore OCSP stapling in the wild with experts Devdatta Akhawe and Emily Stark. Learn about TLS security, browser implementations, and real-world challenges in HTTPS ecosystems.
Add to list
1 Lesons
49 minutes
On-Demand
Free-Video
OWASP Foundation

Dissecting Browser Privacy

0 rewiews
Explore browser privacy with a senior security engineer from Brave, covering key issues and advancements in protecting user data while browsing the web.
Add to list
1 Lesons
50 minutes
On-Demand
Free-Video
OWASP Foundation

Proactively Defending Your Business Against Security Protocol Attacks - OWASP AppSec California 2015

0 rewiews
Explore strategies to proactively defend against security protocol attacks and implementation flaws in HTTPS/SSL/TLS. Learn about recent vulnerabilities, mitigations, and best practices for secure communications.
Add to list
1 Lesons
59 minutes
On-Demand
Free-Video
OWASP Foundation

Making Content Security Policy Work For You

0 rewiews
Learn about Content Security Policy (CSP), its importance in web application defense, and practical tips for implementation from Mozilla's application security expert.
Add to list
1 Lesons
41 minutes
On-Demand
Free-Video
OWASP Foundation

Libinjection: From SQLi to XSS Detection - New Algorithm Introduction

0 rewiews
Explore advanced techniques for detecting SQLi and XSS attacks using libinjection, a fast and accurate algorithm. Learn about its implementation, benefits, and future developments in web security.
Add to list
28 Lesons
34 minutes
On-Demand
Free-Video
OWASP Foundation

The Perilous Future of Browser Security

0 rewiews
Explore browser security challenges, tradeoffs, and solutions. Learn about critical vulnerabilities, secure browser design, and balancing security with user experience in the face of evolving threats.
Add to list
18 Lesons
42 minutes
On-Demand
Free-Video
OWASP Foundation

Fixing XSS with Content Security Policy

0 rewiews
Learn how Content Security Policy (CSP) can prevent XSS attacks, understand its versions, browser support, and implementation strategies for web applications. Gain insights on balancing CSP with traditional security measures.
Add to list
1 Lesons
58 minutes
On-Demand
Free-Video
International PHP Conference

The First 200 Milliseconds of HTTPS

0 rewiews
Explore the intricate process of HTTPS connections, from certificates to cipher suites. Gain insights into the hidden mechanisms that ensure secure web browsing and understand potential vulnerabilities.
Add to list
1 Lesons
56 minutes
On-Demand
Free-Video
Ubuntu OnAir

Native Messaging for Strictly Confined Browsers

0 rewiews
Explore native messaging implementation for Firefox snap, including WebExtensions portal and browser changes. Demonstration of functionality with extensions and future plans for other browsers.
Add to list
1 Lesons
23 minutes
On-Demand
Free-Video
OWASP Foundation

Roadblocks for Content Security Policy (CSP) Implementation - Developer Challenges and Solutions

0 rewiews
Explore challenges in implementing Content Security Policy (CSP) for web security, including complexity, legacy code, and browser support. Learn strategies to overcome obstacles and enhance CSP deployment.
Add to list
25 Lesons
39 minutes
On-Demand
Free-Video
Fission

Secure Key Management in the Browser with UCAN - Fission Platform Overview

0 rewiews
Explore secure key management in browsers using UCAN, WebCrypto API, and DIDs. Learn about Fission's platform and plans for Filecoin integration without browser extensions.
Add to list
1 Lesons
1 hour
On-Demand
Free-Video
John Hammond

Fake CAPTCHA Malware Analysis

0 rewiews
Explore the deceptive tactics of malware disguised as CAPTCHA, uncovering its distribution methods and analyzing its impact on cybersecurity.
Add to list
1 Lesons
23 minutes
On-Demand
Free-Video
Black Hat

Escaping Modern Web-Based App Sandboxes - Site Isolation Vulnerabilities

0 rewiews
Explore Chrome's site isolation vulnerabilities in web-based apps, revealing how attackers can bypass security measures to execute malicious actions and compromise user data.
Add to list
1 Lesons
36 minutes
On-Demand
Free-Video
John Hammond

The Mark of the Web - Understanding Internet Security Zones

0 rewiews
Explore the Mark of the Web security feature, its impact on file downloads, and how it affects system protection and user experience in Windows operating systems.
Add to list
1 Lesons
28 minutes
On-Demand
Free-Video
ACM SIGPLAN

Towards Better Semantics Exploration for Browser Fuzzing

0 rewiews
Explore innovative browser fuzzing techniques using production-context sensitive grammars for enhanced semantic coverage and bug detection in Chrome, Safari, and Firefox.
Add to list
1 Lesons
17 minutes
On-Demand
Free-Video
Black Hat

Back to the Roots - Finding the Origin of CSP Security Bugs

0 rewiews
Explore the root causes of Content Security Policy bugs in web browsers, their lifecycle, and insights for both attackers and defenders using automated analysis tools.
Add to list
1 Lesons
26 minutes
On-Demand
Free-Video
OffensiveCon

Blasting Past WebP - Exploring Image Format Vulnerabilities

0 rewiews
Explore advanced techniques for bypassing WebP image format security measures, uncovering vulnerabilities and potential exploits in web applications.
Add to list
1 Lesons
43 minutes
On-Demand
Free-Video
OffensiveCon

The V8 Heap Sandbox - Understanding JavaScript Engine Security

0 rewiews
Explore V8 engine's heap sandbox implementation, its security implications, and potential vulnerabilities in Chrome's JavaScript engine.
Add to list
1 Lesons
28 minutes
On-Demand
Free-Video
OffensiveCon

Escaping the Safari Sandbox: A Tour of Webkit IPC

0 rewiews
Explore Webkit IPC vulnerabilities and techniques for escaping the Safari sandbox, gaining insights into browser security and exploitation.
Add to list
1 Lesons
29 minutes
On-Demand
Free-Video
Alan Turing Institute

Safeguarding Users’ Sensitive Data in the Cloud and the Browser

0 rewiews
Explore techniques for protecting sensitive data in cloud and browser environments, focusing on least privilege principle and preventing information leakage even during successful attacks.
Add to list
1 Lesons
54 minutes
On-Demand
Free-Video
DEFCONConference

Sneaky Extensions - Bypassing MV3 Security in Browser Extensions

0 rewiews
Discover how browser extensions can exploit security vulnerabilities in MV3, including webcam hijacking, credential theft, and arbitrary code execution, while learning protective measures against these threats.
Add to list
1 Lesons
21 minutes
On-Demand
Free-Video
Bugcrowd

How to Use ZAP and ZAP HUD for Web Application Testing - LevelUp 0x04

0 rewiews
Learn to use ZAP for web app testing and explore its new Heads Up Display feature, bringing powerful functionality directly into your browser for enhanced security analysis.
Add to list
1 Lesons
59 minutes
On-Demand
Free-Video
OWASP Foundation

Misconfigured CORS and Web Application Security Challenges

0 rewiews
Explore CORS misconfiguration vulnerabilities and the challenges of implementing advanced browser security features, with insights on balancing security and operational complexity.
Add to list
1 Lesons
40 minutes
On-Demand
Free-Video
OWASP Foundation

WebRTC Security - How Secure Is P2P Browser Communication?

0 rewiews
Explore the security implications of peer-to-peer browser communication through WebRTC, examining potential vulnerabilities and best practices for secure implementation.
Add to list
1 Lesons
50 minutes
On-Demand
Free-Video
OWASP Foundation

Million Browser Botnet - Creating a JavaScript-Driven Browser Botnet for DDoS Attacks

0 rewiews
Explore how online advertising networks can be exploited to create massive browser botnets for various malicious activities, including DDoS attacks and password cracking, without leaving traces.
Add to list
41 Lesons
48 minutes
On-Demand
Free-Video
OWASP Foundation

Exploiting Web Messaging Implementations

0 rewiews
Uncover vulnerabilities in cross-document messaging, learn common developer mistakes, and explore open-source tools for identifying post messaging security issues in web applications.
Add to list
1 Lesons
58 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Geeking Out with WebAssembly and Kubernetes Using ContainerD Shims

0 rewiews
Explore WebAssembly integration with Kubernetes using ContainerD shims, covering features, risks, and practical demonstrations for cloud-native development.
Add to list
14 Lesons
59 minutes
On-Demand
Free-Video
Cooper

Web Security: Broken by Default?

0 rewiews
Explore web security challenges, focusing on browser vulnerabilities and emerging standards to address these issues. Learn how developers can enhance application security beyond code fixes.
Add to list
1 Lesons
52 minutes
On-Demand
Free-Video
Linux Foundation

Don't Get Owned by Dependencies - How Firefox Uses WebAssembly for Protection

0 rewiews
Explore Firefox's innovative use of WebAssembly to create lightweight sandboxes for third-party C libraries, enhancing security against memory vulnerabilities and zero-day attacks.
Add to list
1 Lesons
30 minutes
On-Demand
Free-Video
Okta

Identity in Browsers, Single-Page Apps, and JWT Access Tokens - OAuth Happy Hour

0 rewiews
Live Q&A session exploring OAuth and OpenID Connect, covering browser-based apps, JWT tokens, and recent developments in identity protocols. Experts discuss specifications and answer audience questions.
Add to list
1 Lesons
1 hour 1 minute
On-Demand
Free-Video
NDC Conferences

The Future of Cookies

0 rewiews
Explore the evolving landscape of web cookies, their impact on privacy, and recent browser changes affecting their functionality. Learn about challenges and future trends in cookie usage.
Add to list
1 Lesons
44 minutes
On-Demand
Free-Video
OWASP Foundation

What Can Traditional Web App Security Learn From Browser Wallet Extensions?

0 rewiews
Explore innovative security insights from browser wallet extensions, offering fresh perspectives to enhance traditional web application protection strategies.
Add to list
1 Lesons
46 minutes
On-Demand
Free-Video
BSidesLV

All That Glitters Isn't Chrome - Hunting for Suspicious Browser Extensions

0 rewiews
Explore techniques for identifying and analyzing suspicious browser extensions, focusing on Chrome, to enhance cybersecurity awareness and protection strategies.
Add to list
23 Lesons
26 minutes
On-Demand
Free-Video
Recon Conference

Your Chakra Is Not Aligned

0 rewiews
Exploring Microsoft Chakra's JavaScript engine implementation, its vulnerabilities, and techniques for identifying bugs in new ECMAScript engines to enhance browser security.
Add to list
1 Lesons
20 minutes
On-Demand
Free-Video
Strange Loop Conference

Servo - Designing and Implementing a Parallel Browser

0 rewiews
Explore Servo, an experimental browser engine designed for multi-core hardware, focusing on parallelization and security through Rust. Learn about its goals, design, and potential impact on web browsing.
Add to list
19 Lesons
41 minutes
On-Demand
Free-Video
media.ccc.de

From Zero to Zero Day

0 rewiews
Journey from coding challenges to discovering a critical Edge browser vulnerability, with insights on JIT type confusion and browser exploitation.
Add to list
12 Lesons
48 minutes
On-Demand
Free-Video
media.ccc.de

Breaking Microsoft Edge Extensions Security Policies

0 rewiews
Uncover vulnerabilities in Microsoft Edge extensions, exploring permission bypasses, data theft, and security policy breaches. Learn about browser extension security and its impact on user privacy.
Add to list
15 Lesons
30 minutes
On-Demand
Free-Video
44CON Information Security Conference

Penetration Testing Considered Harmful

0 rewiews
Critique of penetration testing practices, exploring limitations, misconceptions, and potential harm in cybersecurity. Proposes alternative approaches and challenges industry norms.
Add to list
60 Lesons
47 minutes
On-Demand
Free-Video
OWASP Foundation

Exploiting Unknown Browsers and Objects

0 rewiews
Discover hidden browser vulnerabilities with the Hackability Inspector, a new offensive toolkit for security researchers to explore and exploit unknown entities in embedded browsers.
Add to list
18 Lesons
39 minutes
On-Demand
Free-Video
OWASP Foundation

Temporal - Code-Origin Policy - Towards a Formal User Privacy Protection for the Web

0 rewiews
Explore a novel approach to web privacy protection through code-origin monitoring, offering customizable user safeguards and formal assurance mechanisms for JavaScript execution.
Add to list
15 Lesons
27 minutes
On-Demand
Free-Video
Association for Computing Machinery (ACM)

The "Web/Local" Boundary Is Fuzzy - A Security Study of Chrome's Process-based Sandboxing

0 rewiews
Explore Chrome's process-based sandboxing, its security implications, and potential vulnerabilities in web browser architecture. Learn about attacks exploiting the fuzzy web/local boundary.
Add to list
13 Lesons
25 minutes
On-Demand
Free-Video
Black Hat

Attacking Client-Side JIT Compilers

0 rewiews
Explore JIT compiler security in JavaScript engines, focusing on challenges, solutions, and potential vulnerabilities. Learn about optimization techniques and their impact on browser exploitation.
Add to list
39 Lesons
43 minutes
On-Demand
Free-Video
Black Hat

Cache Side Channel Attack - Exploitability and Countermeasures

0 rewiews
Explore dangerous cache attacks, their characteristics, and real-world applications. Learn about exploitability, countermeasures, and key takeaways for protecting against these privacy-violating threats.
Add to list
19 Lesons
56 minutes
On-Demand
Free-Video
Strange Loop Conference

Chrome Security Secret Sauce

0 rewiews
Explore Chrome's security features, threats, and protective measures. Learn about browser exploits, phishing, SSL attacks, and defense strategies from Google's "Security Princess".
Add to list
30 Lesons
41 minutes
On-Demand
Free-Video
Black Hat

Exploiting CSP in WebKit to Break Authentication and Authorization

0 rewiews
Uncover a critical WebKit vulnerability that compromises authentication and authorization in web applications, exposing weaknesses in browser security features and their implementation.
Add to list
1 Lesons
28 minutes
On-Demand
Free-Video
Black Hat

Cutting Edge - Microsoft Browser Security — From People Who Owned It

0 rewiews
Deep dive into Microsoft Edge security architecture, exploring sandbox initialization, browser broker implementation, and renderer security isolation.
Add to list
31 Lesons
44 minutes
On-Demand
Free-Video
Black Hat

The Power of Pair - One Template that Reveals 100+ UAF IE Vulnerabilities

0 rewiews
Discover a unique fuzzing strategy that revealed over 100 IE use-after-free vulnerabilities. Learn about the vulnerability hunting system and techniques used to find critical browser security flaws.
Add to list
27 Lesons
34 minutes
On-Demand
Free-Video
Black Hat

Automated Detection of Firefox Extension-Reuse Vulnerabilities

0 rewiews
Discover a novel extension-reuse vulnerability in Firefox and learn about CROSSFIRE, a static analyzer that detects these vulnerabilities and generates exploit templates for rapid proof-of-concept creation.
Add to list
28 Lesons
57 minutes
On-Demand
Free-Video
Black Hat

Understanding the Attack Surface and Attack Resilience of Project Spartan's New EdgeHTML Rendering Engine

0 rewiews
Explore EdgeHTML's attack surface, compare it with MSHTML, and analyze exploit mitigations in Windows 10's new rendering engine for enhanced web security understanding.
Add to list
1 Lesons
40 minutes
On-Demand
Free-Video
LASCON

Blindspots

0 rewiews
Robert Hansen shares insights on overlooked areas in web application and browser security, challenging industry professionals to broaden their thinking and address critical blindspots.
Add to list
1 Lesons
39 minutes
On-Demand
Free-Video

Pavlovian Security - How To Change the Way Your Users Respond When the Bell Rings

0 rewiews
Learn to influence user behavior for better security through Pavlovian techniques. Explore motivations, failures, and practical strategies to raise awareness and create secure habits in your organization.
Add to list
22 Lesons
53 minutes
On-Demand
Free-Video
IEEE

EmPoWeb - Empowering Web Applications with Browser Extensions

0 rewiews
Explores security risks of browser extension APIs, revealing how web apps can exploit them to bypass SOP, access sensitive user data, and perform privileged actions on users' devices.
Add to list
1 Lesons
20 minutes
On-Demand
Free-Video
IEEE

Fidelius - Protecting User Secrets from Compromised Browsers

0 rewiews
Innovative architecture using trusted hardware enclaves to protect sensitive user data during web browsing, even in fully compromised environments. Offers secure form data, JavaScript, XMLHttpRequests, and storage solutions.
Add to list
1 Lesons
19 minutes
On-Demand
Free-Video
Black Hat

Crippling HTTPS with Unholy PAC

0 rewiews
Explore how malicious Proxy AutoConfiguration can compromise HTTPS security, leak sensitive data, and enable cross-platform attacks, even on secure networks and browsers.
Add to list
23 Lesons
44 minutes
On-Demand
Free-Video
IEEE

The Leaky Web - Automated Discovery of Cross-Site Information Leaks in Browsers and the Web

0 rewiews
Explore automated techniques for identifying cross-site information leaks in web browsers, enhancing understanding of web security vulnerabilities and potential mitigation strategies.
Add to list
1 Lesons
14 minutes
On-Demand
Free-Video
IEEE

WebSpec - Towards Machine-Checked Analysis of Browser Security Mechanisms

0 rewiews
Explore machine-checked analysis of browser security mechanisms, focusing on WebSpec's approach to enhancing web security through formal verification and automated reasoning techniques.
Add to list
1 Lesons
14 minutes
On-Demand
Free-Video
GOTO Conferences

Building Layers of Defense with Spring Security

0 rewiews
Comprehensive guide to implementing multi-layered security in Spring applications, covering authentication, authorization, protection against common web vulnerabilities, and custom security configurations.
Add to list
48 Lesons
50 minutes
On-Demand
Free-Video
Hack In The Box Security Conference

Hack In The Studio - Fireside Chat

0 rewiews
Fireside chat with cybersecurity experts Stefano Zanero and Marco Balduzzi, discussing their research, experiences, and insights in malware analysis, cyberphysical security, and emerging threats in the digital landscape.
Add to list
1 Lesons
32 minutes
On-Demand
Free-Video
Strange Loop Conference

Don't Get Owned by Your Dependencies

0 rewiews
Explore innovative techniques for mitigating memory safety vulnerabilities in third-party C libraries, focusing on Firefox's lightweight in-memory sandboxing approach and the RLBox framework for efficient, secure application development.
Add to list
1 Lesons
32 minutes
On-Demand
Free-Video
Black Hat

The Most Secure Browser? Pwning Chrome from 2016 to 2019

0 rewiews
Explore Chrome browser security vulnerabilities and exploitation techniques from 2016 to 2019, presented by researchers who successfully pwned Nexus 6P in Mobile Pwn2Own 2016.
Add to list
1 Lesons
43 minutes
On-Demand
Free-Video
IEEE

Spook.js - Attacking Chrome Strict Site Isolation via Speculative Execution

0 rewiews
Explore a novel attack on Chrome's Strict Site Isolation, leveraging speculative execution to bypass security measures and potentially compromise user data.
Add to list
1 Lesons
19 minutes
On-Demand
Free-Video
Black Hat

Runtime Analysis of Vulnerabilities and Generation of Exploits

0 rewiews
Runtime analysis tool for detecting vulnerabilities and generating exploits. Leverages program execution to identify dataflows, usable for both offensive and defensive purposes. Includes live demonstrations and open-source release.
Add to list
20 Lesons
47 minutes
On-Demand
Free-Video
Black Hat

Diving Into IE 10’s Enhanced Protected Mode Sandbox

0 rewiews
Explore IE 10's Enhanced Protected Mode Sandbox, its security features, and potential vulnerabilities in this in-depth technical analysis.
Add to list
1 Lesons
48 minutes
On-Demand
Free-Video
Black Hat

Million Browser Botnet

0 rewiews
Explore how online advertising networks can be exploited to create massive browser botnets, enabling DDoS attacks, spam campaigns, and password cracking without malware or zero-day vulnerabilities.
Add to list
1 Lesons
49 minutes
On-Demand
Free-Video
Black Hat

Attacking the WebAssembly Compiler of WebKit

0 rewiews
Explore vulnerabilities in WebKit's WebAssembly compiler, focusing on recent updates and new features. Learn about potential security risks and attack surfaces in browser implementations.
Add to list
1 Lesons
27 minutes
On-Demand
Free-Video
USENIX

Checking Passwords on Leaky Computers - A Side Channel Analysis of Chrome's Password Leak Detect Protocol

0 rewiews
Explore side-channel vulnerabilities in Chrome's password leak detection, revealing potential risks to user privacy and security through microarchitectural attacks on cryptographic implementations.
Add to list
1 Lesons
15 minutes
On-Demand
Free-Video

Incident Response on macOS

0 rewiews
Learn essential techniques for incident response on macOS, covering forensic collection, login items, kernel extensions, startup items, and more. Gain practical insights for effective Mac security management.
Add to list
22 Lesons
52 minutes
On-Demand
Free-Video
JSConf

All Your Browsers Are Belong to Me

0 rewiews
Explore browser control techniques and innovative web development strategies in this engaging JSConf presentation by James Coglan.
Add to list
1 Lesons
26 minutes
On-Demand
Free-Video
JSConf

Keeping Secrets with JavaScript - An Introduction to the WebCrypto API

0 rewiews
Explore the Web Cryptography API, its implementation, and potential for browser-based encryption. Learn about NaCl-inspired API and the future of web security.
Add to list
6 Lesons
23 minutes
On-Demand
Free-Video
JSConf

We're Struggling to Keep Up

0 rewiews
Explore browser security challenges in modern web apps, covering current models, recent features, and potential enhancements, with insights on bypassing security mechanisms.
Add to list
11 Lesons
24 minutes
On-Demand
Free-Video
JSConf

Browser Security in 2017

0 rewiews
Explore modern browser security challenges and solutions in this insightful talk on web vulnerabilities, attack vectors, and protective measures for developers.
Add to list
1 Lesons
29 minutes
On-Demand
Free-Video
NDC Conferences

I'm Pwned. You're Pwned. We're All Pwned.

0 rewiews
Explore modern security challenges, common attacks, and evolving defense strategies in the era of data breaches. Learn practical approaches to protect yourself and your organization online.
Add to list
1 Lesons
57 minutes
On-Demand
Free-Video
USENIX

Tick Tock - Building Browser Red Pills from Timing Side Channels

0 rewiews
Exploring browser-based red pills to detect virtual environments, their impact on web malware scanners, and potential mitigations for enhanced cybersecurity.
Add to list
1 Lesons
20 minutes
On-Demand
Free-Video
DEFCONConference

Clocks Have Ears - Timing and Browser-Based Local Network Port Scanner

0 rewiews
Discover how browser-based timing attacks can be used for local network port scanning, exploring innovative security techniques and network vulnerability assessment methods.
Add to list
1 Lesons
18 minutes
On-Demand
Free-Video
DEFCONConference

Exploiting Localhost APIs From The Browser - Zero-Day Vulnerability and Attack Techniques

0 rewiews
Discover how browser-based attacks exploit localhost services through a zero-day vulnerability, featuring live demonstrations of remote code execution and novel attack techniques targeting developers behind firewalls.
Add to list
1 Lesons
27 minutes
On-Demand
Free-Video
DEFCONConference

Relative Path File Injection: The Next Evolution in RPO

0 rewiews
Discover how Relative Path File Injection attacks can turn trusted websites into malware delivery platforms, exploring detection methods and real-world implementations through practical demonstrations.
Add to list
1 Lesons
29 minutes
On-Demand
Free-Video
Devoxx

Browser Security and HTTP Headers - Attacks and Protections in Action

0 rewiews
Explore browser vulnerabilities and learn to mitigate attacks using HTTP security headers like CSP, HSTS, and CORS through live demonstrations and practical examples.
Add to list
1 Lesons
48 minutes
On-Demand
Free-Video
OpenSSF

Novel Sandboxing Techniques for Open Source Libraries Using eBPF and KRSI

0 rewiews
Discover how to implement advanced sandboxing techniques for open source libraries using eBPF and KRSI technologies to enhance security and protect against vulnerabilities and exploits.
Add to list
1 Lesons
33 minutes
On-Demand
Free-Video
USENIX

Rise of Inspectron: Automated Black-box Auditing of Cross-platform Electron Applications

0 rewiews
Discover how Inspectron framework automates security vulnerability detection in Electron apps, exploring common risks and developer practices for cross-platform application security.
Add to list
1 Lesons
16 minutes
On-Demand
Free-Video
USENIX

Web Platform Threats: Automated Detection of Web Security Issues with WPT

0 rewiews
Discover how automated detection frameworks identify security flaws in web browser mechanisms, exploring practical approaches to validate web invariants and detect vulnerabilities across major browsers.
Add to list
1 Lesons
14 minutes
On-Demand
Free-Video