Hacker101
Learn essential bug bounty hunting skills through comprehensive video tutorials covering web security, exploitation techniques, and ethical hacking practices.
Bug Bounty
Comprehensive guide to bug bounty hunting, covering methodologies, tools, and techniques for identifying vulnerabilities in web applications and networks.
AppSec at DevOps Speed and Portfolio Scale
Explore a revolutionary approach to application security using passive sensors for real-time vulnerability detection, enhanced architecture, and proactive collaboration across entire IT portfolios.
Keynote: Request Forgery on the Web - SSRF, CSRF and Clickjacking
Comprehensive exploration of web request forgery attacks and defenses, covering CSRF, SSRF, and clickjacking. Provides practical strategies for developers to secure web applications against these vulnerabilities.
Client-side Security with the Security Header Injection Module (SHIM)
Learn about client-side security headers and a new open-source tool for ASP.NET to mitigate vulnerabilities by setting security headers in web applications.
Modern Web Application Defense with OWASP Tools
Learn to defend web applications using OWASP tools. Explore XSS, CSRF, and other vulnerabilities through live demos. Gain practical skills to prevent attacks and secure your applications effectively.
New Web Platform Security Features to Protect Modern Web Applications
Explore modern web browser security features to protect against XSS, CSRF, and clickjacking. Learn about CSP3, Trusted Types, Fetch Metadata Request Headers, CORP, and COOP for enhanced application security.
HTML5 Something Wicked This Way Comes
Exploring HTML5's security vulnerabilities and advanced UI-Redressing techniques, demonstrating how attackers can exploit seemingly minor flaws in web applications for malicious purposes.
Clobbering the Cloud - Part 2
Explore advanced cloud security vulnerabilities, including clickjacking, sharing space issues, and custom language platforms. Learn defensive strategies and future directions in cloud protection.
UI Redressing Attacks on Android Devices
Explore UI redressing attacks on Android devices, including clickjacking and new browserless attacks, along with mitigation techniques for improved mobile security.
Doing This One Crazy Thing Will Change Your AppSec Program Forever
Discover how to revolutionize your AppSec program through effective communication, prioritization, and innovative strategies for securing software development.
A Stratagem on Strategy - Rolling Testing into Product Testing
Explore integrating security testing into product testing strategies, enhancing coverage and aligning security with software requirements for more effective quality assurance in the SDLC.
Fingerprint-Jacking - Practical Fingerprint Authorization Hijacking in Android Apps
Practical exploration of fingerprint authorization vulnerabilities in Android apps, demonstrating attack techniques and suggesting mitigation strategies for developers.
Facebook's Approach to Common Web Vulnerabilities
Explore Facebook's strategies for combating web vulnerabilities, including XSS, CSRF, and SQL injection, through security libraries, automated detection, and lint rules.
Next Generation Clickjacking
Explore advanced clickjacking techniques, including data injection and extraction, cross-browser vulnerabilities, and a new tool for creating multi-step attacks on web applications.
The Deputies Are Still Confused
Exploring misunderstandings and vulnerabilities in same-origin policy, with practical examples of attacks bypassing common content-isolation mechanisms for CSRF, clickjacking, and NTLM protection.
Clickjacking Revisited - A Perceptual View of UI Security
Explores UI security vulnerabilities from a perceptual perspective, presenting novel attacks that bypass current defenses and discussing potential countermeasures and their limitations.
Everybody Gets Clickjacked - Hard Knock Lessons on Bug Bounties
Explore hard-knock lessons on bug bounties and clickjacking vulnerabilities, gaining insights into web security challenges and effective mitigation strategies.
Web Application Security Trends
Explore modern web security threats beyond traditional attacks, including vulnerabilities in Angular, Clickjacking, and XSS via file uploads. Stay updated on evolving risks and defense strategies.
Black Hat Europe 2024
Black Hat Europe 2024