
Explore OWASP's top 10 web application security vulnerabilities with real-life examples and practical insights to enhance backend security and protect against common threats.

Innovative approach to AppSec training using LEGO minifigures and custom builds to enhance retention. Covers key security concepts with creative visual metaphors for better engagement and understanding.

Explore strategies to combat injection vulnerabilities, including cross-site scripting, with insights on secure coding practices, framework design, and static analysis tools for improved application security.

Learn how programming languages can prevent injection vulnerabilities by distinguishing trusted developer strings from potentially attacker-controlled input, ensuring safer handling of user values in sensitive contexts.

Explore common security pitfalls in coding and learn practical tips to write secure, bulletproof applications. Covers input validation, injection, file overwrites, and arbitrary code execution with real-world examples.

Innovative web scanner using intuitive techniques to detect injection vulnerabilities, offering WAF evasion, minimal network footprint, and adaptability to input filtering. Explores advanced exploitation methods and handles complex findings.

Explore JavaScript vulnerabilities in OWASP Top 10, covering client and server-side issues with focus on modern frameworks and NodeJS. Learn prevention techniques for secure web development.

Explore web application security fundamentals, attack vectors, and tools for bug hunting. Learn key concepts to kickstart your career in application security.

Explore PDF vulnerabilities and learn how a single HTTP link can compromise PDF contents, exposing security risks in widely-used document formats and generators.

Learn why Django excels in secure web development, covering key security features and best practices to protect against common vulnerabilities and threats.

Explore how Python's type system can enhance code security, from simple annotations to advanced tools, preventing vulnerabilities and enabling incremental improvements in project safety.

Black Hat USA 2025

Black Hat Europe 2023

Black Hat Europe 2022