Web Security
This course is a comprehensive overview of web security. The goal is to build an understanding of the most common web attacks and their countermeasures.
Burp Suite - Basic Concepts for Web Pentesting
Learn essential web pentesting techniques using Burp Suite, covering parameter passing, code injection, XSS, LFI/RFI attacks, and SQL injection for effective security testing of web applications.
Bug Bounty Hunting Methodology - Jason Haddix from Bugcrowd's LevelUp
Comprehensive web hacking methodology covering reconnaissance, scanning, and exploitation techniques for bug bounty hunters and security researchers.
Input Sanitization - Peter Faiman
Learn essential techniques for validating user input, protecting against common vulnerabilities, and developing a security-focused mindset to safeguard your applications from malicious or unintended user actions.
Web Attacks
Explore common web vulnerabilities and attack methods, including discovery techniques, backdoors, weak passwords, and injection attacks, to enhance your cybersecurity knowledge.
Data Loss Prevention: Databases and Web Security
Explore web vulnerabilities, SQL injection, and database security techniques to enhance your cybersecurity skills and protect against data loss.
OWASP Serverless Top 10 - Security Risks and Protections
Explore serverless security risks, challenges, and protective measures. Learn about OWASP Serverless Top 10 and DVSA tool for understanding serverless security implications and processes.
The Bug Hunter's Methodology 2.0 - Advanced Web Application Security Testing
Explore cutting-edge techniques and tools for discovering vulnerabilities in web applications, including XSS, SSTI, SSRF, code injection, and more. Learn from expert Jason Haddix's updated methodology for effective penetration testing.
CIAPO - Code Injection via Arbitrary Pointer Overwrite
Explore code injection via arbitrary pointer overwrite in this cybersecurity presentation. Learn about vulnerabilities, hacking techniques, and defensive strategies from a Bitdefender security researcher.
Poisoned Pickles Make You Ill - Securing Machine Learning Model Serialization
Explore the security risks of using pickle for ML model serialization and learn strategies to protect against poisoned pickles in data science pipelines.
Active Scan Augmenting Manual Testing with Attack Proxy Plugins
Explore advanced web security techniques with ActiveScan++, a Burp Suite plugin for detecting complex vulnerabilities like host header poisoning and code injection through heuristic probes and automated analysis.
iOS App Integrity: Enhancing Security with Encrypted Code Modules
Explore iOS app security vulnerabilities and learn advanced protection techniques like Encrypted Code Modules (ECM) to safeguard against static analysis, binary patching, and other common attacks.
Pipeline Pandemonium - Hijacking Cloud Security Through CI/CD Vulnerabilities
Explore CI/CD pipeline vulnerabilities in cloud environments, examining real-world examples of security risks and exploitation techniques in GitHub, CircleCI, and Jenkins.
The GitHub Actions Worm - Understanding CI/CD Platform Vulnerabilities
Dive into the security vulnerabilities of GitHub Actions, exploring how malicious code can spread through Action dependencies and learning essential defense strategies against CI/CD platform attacks.
Livepatch in Userspace Based on Uprobe
Explore userspace livepatch techniques for CVE and bug fixes, covering compiler modifications, patch generation, process recognition, and code injection using Uprobe.
Poisoned Pickles - Security Risks and Protections for Serialized ML Models
Explore the security risks of using pickle for ML model serialization and learn strategies to protect against poisoned pickles in data science pipelines.
LVBS and Advanced Kernel Integrity
Explore advanced Linux Virtualization based Security (LVBS) features for enhanced kernel integrity. Learn about hardening techniques to protect against unauthorized modifications, even in compromised environments.
PwdLess - Exploitation Tales from RouterLand
Explore IoT device security through an attacker's perspective, covering fuzzing, reverse engineering, and exploit development. Learn about vulnerabilities, remote execution techniques, and challenges in IoT security.
Putting It All Together - Building an iOS Jailbreak from Scratch
Comprehensive guide to building an iOS jailbreak, covering memory vulnerabilities, kernel exploitation, sandbox escape, filesystem remounting, and code injection techniques for the latest Apple devices.
Caught My WebApp Cheating on Me
Exploring techniques to detect and prevent client-side injections and tampering in web applications, ensuring integrity and security of code executed in the browser.
An Evolving Era of Botnet Empires
Explore the evolution of botnet empires, their lifecycle, functions, and detection methods. Learn about famous botnets, takedown attempts, and manual analysis techniques.