Going Bananas for Cloud Security - Auditing AWS Deployments with Security Monkey
Explore AWS security auditing with security_monkey, a tool for tracking changes, auditing configurations, and understanding interconnectivity across AWS accounts. Learn cloud security best practices and efficient monitoring techniques.
QARK: Android App Exploit and Static Code Analysis Tool
Explore QARK, a comprehensive tool for Android app security analysis and exploitation. Learn how it combines static code analysis, vulnerability detection, and automatic exploit generation for developers and pentesters.
Chimera - Securing a Cloud App Ecosystem with ZAP at Scale
Explore Chimera: a cloud-based solution using ZAP to enhance security for small developers and ISVs in large app ecosystems, making advanced scanning tools accessible without security expertise.
Collective Detection of Harmful Requests
Explore collective detection techniques for identifying harmful web requests, enhancing application security through shared threat intelligence and collaborative defense strategies.
The Tales of a Bug Bounty Hunter - 10 Interesting Vulnerabilities
Explore 10 fascinating vulnerabilities discovered by a bug bounty hunter, offering insights into real-world security flaws and their implications for web application security.
The Top 10 Web Hacks of 2015
Explore the most impactful web security breaches of 2015, gaining insights into vulnerabilities, attack methods, and essential defensive strategies for safeguarding web applications.
Can SaaS Ever Be Secure? - Security Risks and Compliance in Cloud Services
Explore security challenges and solutions for SaaS, including regulatory compliance, data transfers, and risk assessment. Learn key takeaways for ensuring secure cloud-based services.
Mobile Application Assessments By The Numbers - A Holistic View
Explore mobile app security through data-driven insights, examining vulnerabilities and best practices for comprehensive assessments in this OWASP presentation.
From Zero to Hero - How OWASP Saved My Holiday
Discover how OWASP resources can transform your cybersecurity skills and protect your digital life, as demonstrated through a real-world holiday scenario.
PDF - Mess With The Web
Explore PDF vulnerabilities and their impact on web security in this talk by Alex Infuhr, highlighting potential risks and mitigation strategies for developers and security professionals.
WebRTC Security - How Secure Is P2P Browser Communication?
Explore the security implications of peer-to-peer browser communication through WebRTC, examining potential vulnerabilities and best practices for secure implementation.
So, You Want To Use A WebView? - Security Considerations and Best Practices
Explore WebView security challenges, interfaces, testing methods, and threat models. Learn best practices for implementing secure WebViews in mobile applications.
Security Touchpoints When Acquiring Software
Explore key security considerations and touchpoints in software acquisition, focusing on best practices for ensuring secure integration of third-party solutions.
Security and Insecurity of HTTP Headers
Explore HTTP header security and vulnerabilities with Dirk Wetter. Learn about potential risks and best practices for implementing secure headers in web applications.
Server-Side Browsing Considered Harmful
Explore server-side browsing vulnerabilities and their potential risks in web applications. Learn detection techniques and mitigation strategies for improved security.
Hackazon: Stop Hacking Like It's 1999
Explore Hackazon, a modern vulnerable web app for testing security skills. Learn about its AJAX interface, RESTful APIs, and configurable vulnerabilities that challenge both automated scanners and manual pentesters.
Uncovering OWASP's Mobile Risks in iOS Apps - AppSec California 2015
Explore iOS app vulnerabilities through reverse engineering techniques. Learn to extract, analyze, and identify common security risks in mobile applications using real-world examples.
Reversing Engineering Web Applications for Security - Behavior Analysis and WAF Detection
Explore web application reverse engineering, behavior analysis, and WAF detection techniques. Learn to create effective countermeasures against complex attacks using whitelist protection and traffic analysis.
Runtime Manipulation of Android and iOS Applications - Mobile Security Testing
Hands-on exploration of runtime manipulation and memory analysis techniques for Android and iOS apps, enhancing mobile security testing skills using tools like cycript and snoop-it.
Bringing a Machete to the Amazon: Securing AWS Applications
Explore AWS security challenges, vulnerabilities, and new techniques for assessing and protecting cloud applications. Learn about potential pitfalls and strategies to secure your AWS infrastructure.
Ten Secrets to Secure Mobile Applications
Discover key strategies for securing mobile apps, focusing on encryption, web service design, and user privacy. Learn to threat model and address top vulnerabilities using OWASP Mobile Top Ten framework.