How to Use ZAP and ZAP HUD for Web Application Testing - LevelUp 0x04
Learn to use ZAP for web app testing and explore its new Heads Up Display feature, bringing powerful functionality directly into your browser for enhanced security analysis.
The Diary of an Inexperienced Bug Hunter - Introduction to Android Hacking
Explore Android app security, bug bounty programs, and essential tools for mobile penetration testing. Learn structure analysis and gain practical insights for successful Android hacking.
AuthMatrix - Simplified Authorization Testing for Web Applications
Simplified authorization testing for web apps using AuthMatrix, a Burp Suite extension. Learn common insecurity patterns, mapping techniques, and effective testing methods for access control vulnerabilities.
Active Scan Augmenting Manual Testing with Attack Proxy Plugins
Explore advanced web security techniques with ActiveScan++, a Burp Suite plugin for detecting complex vulnerabilities like host header poisoning and code injection through heuristic probes and automated analysis.
Improving Penetration Testing Efficiency with OWASP Code Pulse and Attack Surface Detector
Explore OWASP tools for efficient web app penetration testing: Code Pulse for real-time code coverage and Attack Surface Detector for comprehensive endpoint discovery, enhancing security assessment capabilities.
Endpoint Finder: A Static Analysis Tool for Web Endpoint Discovery - Lightning Talk
Discover a static analysis tool for extracting web endpoints from JavaScript files, offering improved accuracy and reduced false positives compared to regex-based methods.
ATOR - Authentication Token Obtain and Replace Burp Plugin V3
Streamline complex authentication testing with ATOR v3 Burp Plugin. Automate token handling, OTP validation for JavaScript frameworks. Simplifies configuration and debugging for efficient security assessments.
How We Analyzed and Built an Exploit PoC for CVE-2022-24086, a Magento RCE - Catalin Filip - DefCamp - 2022
Explore the analysis and exploit development for CVE-2022-24086, a critical Magento RCE vulnerability, presented by a security researcher at DefCamp 2022.
Burping Through Your Cryptography Shield - DefCamp - 2018
Explore techniques for bypassing cryptography shields using Burp Suite, with insights on Java extensions and practical problem-solving approaches in information security.
Working with Developers for Fun and Progress
Practical strategies for building strong relationships with developers to create an impactful AppSec program, featuring competition-based training, tooling implementation partnerships, and codebase contributions.
Old Tools New Tricks - Hacking WebSockets
Explore WebSocket hacking techniques, from basic concepts to advanced exploits, using various tools and methods for secure testing and vulnerability assessment.
Pentesting with Docker
Learn to leverage Docker for efficient and flexible penetration testing environments, covering architecture, image building, port forwarding, and integrating essential security tools.
Abusing Web APIs Through Scripted Android Applications
Exploiting Android app vulnerabilities to abuse web APIs, using JRuby for scripting and Burp Suite for testing. Demonstrates attacks bypassing security measures and exposes potential weaknesses in mobile app ecosystems.
AMF Testing Made Easy
Reshaping AMF fuzzing with automated gray-box testing. Learn to build custom AMF messages, dynamically generate objects, and improve fuzzing coverage for complex applications using the Blazer Burp Suite plugin.
Attacking iOS Applications
Explore iOS app vulnerabilities, including traffic interception, Game Center email hashes, and Passbook files. Learn attack techniques and security implications for mobile developers.
Burp for All Languages
Learn to leverage Burp Suite for web application security testing across various programming languages with expert insights and practical techniques.
Attacking OWASP - Exploiting the Top 10
Explore OWASP Top 10 vulnerabilities through hands-on demonstrations, learning practical exploitation techniques and essential web security concepts for effective penetration testing.
Red Team Madness - Or How I Learned To Stop Worrying and Expect Pentester Mistakes
Explore red team tactics, pentester mistakes, and effective defensive strategies. Learn to detect and respond to various attack techniques, from encrypted drives to brute force attempts.
Need More Sleep - REST Could Help Drew Branch
Explore REST APIs, their classification, testing methods, and security considerations. Learn about status codes, data formats, and tools like Postman and Burp Suite for API development and protection.
OWASP Top 10 - Hacking Web Applications with Burp Suite
Learn to exploit web application vulnerabilities using Burp Suite, focusing on the OWASP Top 10 security risks. Enhance your ethical hacking skills and improve web security knowledge.
Extending Burp
Explore techniques for enhancing Burp Suite's functionality through extensions, improving web application security testing capabilities and efficiency.