Bounties and the Software Development Life Cycle
Katie Moussouris explores bug bounties, vulnerability disclosure, and their integration into the software development lifecycle. She shares insights on organizational empathy, bounty program implementation, and improving application security.
Copy Pest - A Case Study on the Clipboard, Blind Trust, and Invisible Cross-Application XSS
Explore clipboard vulnerabilities and cross-application XSS in this case study on invisible security threats and blind trust in web applications.
Mantra OS - Penetration Testing Tools and Methodologies
Explore Mantra OS's penetration testing tools for web application security, including DDoS, SQL injection, and man-in-the-middle attacks. Learn practical methodologies and controlled environment testing techniques.
Accidental Abyss: Data Leakage on the Internet
Explore techniques for uncovering personal information scattered across the internet, learn about low-tech reconnaissance methods, and discover tools for effective social engineering and improved security awareness.
AppSec at DevOps Speed and Portfolio Scale
Explore a revolutionary approach to application security using passive sensors for real-time vulnerability detection, enhanced architecture, and proactive collaboration across entire IT portfolios.
OWASP Hackademic - Teaching Application Security Through Practical Challenges
Practical environment for teaching application security through realistic scenarios with known vulnerabilities. Students discover and exploit vulnerabilities, gaining hands-on experience from an attacker's perspective.
Use After Free Exploitation - Detecting and Exploiting Heap Vulnerabilities
Explore Use After Free vulnerabilities, their detection, and exploitation in web browsers. Learn about memory leaks and ASLR bypass techniques from an industry expert.
Blended Web and Database Attacks on Real-time, In-Memory Platforms
Explore blended web and database attacks on real-time, in-memory platforms, focusing on SAP HANA. Learn about novel exploit techniques, vulnerabilities, and security considerations for these high-performance systems.
Wi-Fi Hacking for Web Pentesters
Explore Wi-Fi vulnerabilities and learn to leverage web pentesting skills for designing and deploying malicious access points. Gain insights into attacking clients, hijacking accounts, and stealing sensitive information.
Static Analysis for Dynamic Assessments - OWASP AppSecUSA 2014
Explore techniques for using static analysis tools in dynamic web vulnerability assessments without source code, enhancing detection of security weaknesses in complex applications.
The Rise of SaaS-Targeted Malware - Zeus Variant Attacking Salesforce Users
Demonstration of a new Zeus malware variant targeting Salesforce users, showcasing its stealthy data exfiltration capabilities and discussing implications for SaaS security.
Libinjection: From SQLi to XSS Detection - New Algorithm Introduction
Explore advanced techniques for detecting SQLi and XSS attacks using libinjection, a fast and accurate algorithm. Learn about its implementation, benefits, and future developments in web security.
reNgine - An Automated Reconnaissance Framework
Explore an automated reconnaissance framework for efficient cybersecurity assessments, enhancing vulnerability detection and streamlining security workflows.
Hardware Protections Against ROP Attacks
Explore hardware-based defenses against Return-Oriented Programming (ROP) attacks with IBM expert Mike Rapoport, focusing on cutting-edge security measures for system protection.
Hacking for Developers
Learn ethical hacking techniques, tools, and methodologies to enhance your development skills and improve software security. Gain insights into vulnerability assessment and exploitation.
How to Rob a Bank - Modern Hacking Techniques and Security Defenses
Practical demonstration of modern hacking techniques and defense strategies through a simulated bank robbery, offering insights into targeted attacks and organizational preparedness.
Malicious Use of Microsoft Local Administrator Password Solution
Exploiting vulnerabilities in Microsoft's LAPS to gain unauthorized access to local administrator credentials and maintain presence on compromised systems in post-exploitation scenarios.
Randori - A Low Interaction Honeypot with a Vengeance
Explore Randori, an open-source honeypot built behind existing services. Learn about its conception, results, and a new model for addressing global botnet infections as cyber disease control.
Hacktivism as a Defense Technique in Cyberwar - Lessons for Ukraine
Explore hacktivism's role in cyber defense during wartime, focusing on lessons from Ukraine's experience and strategies for digital resistance against aggression.
Hacking the OWASP Juice Shop
Explore web application security through hands-on hacking of a deliberately insecure e-commerce site, learning about OWASP Top 10 vulnerabilities and ethical hacking techniques.
Offensive Security 101
Learn essential offensive security techniques and strategies to protect systems from cyber threats and vulnerabilities.