2019 OWASP Top 10 - Part 1
Comprehensive exploration of the first half of OWASP Top 10, covering critical web application security risks and effective mitigation strategies for developers and security professionals.
Web Attacks
Explore common web vulnerabilities and attack methods, including discovery techniques, backdoors, weak passwords, and injection attacks, to enhance your cybersecurity knowledge.
Pentesting ASP.NET - Injection and Cross-Site Scripting Attacks
Explore ASP.NET vulnerabilities and security techniques with expert Bill Sempf. Learn about injection, XSS, authentication management, and cryptography to enhance web application security.
Defending Against Cross-Site Scripting (XSS) Vulnerabilities
Learn to defend against cross-site scripting (XSS) attacks. Covers vulnerability types, injection points, mitigation strategies, and practical demonstrations for developers and security professionals.
Edgeguard: Client-side DOM Security Framework for Detecting Malicious Content - APPSEC Cali 2018
Introducing Edgeguard: an open framework for detecting malicious content in browsers that steals sensitive user data. Learn about this zero-footprint library's approach to enhancing client-side DOM security.
Trusted Types: End-to-End Injection Safety at Scale
Learn about Google's approach to achieving high-level XSS safety through integrated tools and developer-friendly practices, with insights on implementing similar security in open-source stacks.
The API Assessment Primer
Learn essential API security assessment techniques, including key considerations, testing steps, and best practices for protecting APIs and mobile applications from common vulnerabilities and threats.
Harmonizing OWASP API and Application Top 10 Security Risks - Combining Lists for Comprehensive Coverage
Explore API security risks, comparing OWASP's API and Application Top 10 lists. Learn detection and prevention strategies for vulnerabilities in web services, APIs, and GraphQL.
Seven Things About API Security - NDC Oslo 2024
Explore API security best practices, OWASP top vulnerabilities, live demo, and real-world case studies to enhance your API protection strategies and prevent potential breaches.
OWASP Top 10 Security Risks - Part 1 of 5
Comprehensive overview of OWASP Top 10 security vulnerabilities, focusing on injection flaws and broken authentication. Learn to identify and mitigate critical web application risks.
Build, Break, and Hack WebSockets
Explore WebSocket vulnerabilities and exploitation techniques, covering injection attacks and cross-site issues. Learn to build, break, and secure real-time web communications.
NOSQL Web Application Vulnerabilities and Mitigation
Explore NOSQL database vulnerabilities, including injection methods and CSRF, and learn mitigation strategies for enhanced security in web applications.
Keeping Your Java Applications Secure - Cryptographic Improvements and Best Practices
Explore Java's cryptographic enhancements and secure coding practices to develop robust applications with strong security capabilities and protection against vulnerabilities.
NoSQL Is Not NoVulnerable - Exploring Security Risks in NoSQL Databases
Explores vulnerabilities in NoSQL databases, comparing threats to traditional SQL systems and demonstrating new attacks exploiting complex data types like JSON to bypass application-level access controls.
Damn GraphQL - Attacking and Defending APIs
Explore GraphQL security: attack vectors, defense strategies, and hands-on learning with the Damn Vulnerable GraphQL Application. Gain insights into protecting this emerging API technology.
Hopping on the CAN Bus
Learn to hack your car's CAN bus using an open-source toolkit. Explore CAN basics, attack methods, hardware/software tools, diagnostic protocols, and security implications for modern vehicles.
Don't Have a Meltdown - Practical Steps for Defending Your Applications
Practical steps to defend applications against common attacks, covering authentication, injection, updates, sensitive data, and configuration. Learn to mitigate key security risks in containerized environments.
Serverless Attack Vectors
Explore serverless attack vectors, security challenges, and defense strategies in cloud computing. Learn about potential vulnerabilities and best practices for protecting serverless architectures.
Black Clouds and Silver Linings in Node.js Security
Explore Node.js security challenges, mitigation strategies, and practical measures for building secure applications. Learn about OWASP Top 10 issues and recent security initiatives in the Node.js ecosystem.
EDR Evasion Primer for Red Teamers
Insights on EDR inner workings and evasion techniques for red teamers, covering test lab results, reverse engineering findings, and successful attack methodologies to circumvent endpoint protection.
Practical Exploitation Using A Malicious Service Set Identifier - SSID
Explore SSID exploitation techniques for wireless device attacks, including XSS, CSRF, and command injection. Learn about limitations, risk factors, and see live demonstrations of these methods.