Hackazon: Stop Hacking Like It's 1999
Explore Hackazon, a modern vulnerable web app for testing security skills. Learn about its AJAX interface, RESTful APIs, and configurable vulnerabilities that challenge both automated scanners and manual pentesters.
Uncovering OWASP's Mobile Risks in iOS Apps - AppSec California 2015
Explore iOS app vulnerabilities through reverse engineering techniques. Learn to extract, analyze, and identify common security risks in mobile applications using real-world examples.
Reversing Engineering Web Applications for Security - Behavior Analysis and WAF Detection
Explore web application reverse engineering, behavior analysis, and WAF detection techniques. Learn to create effective countermeasures against complex attacks using whitelist protection and traffic analysis.
Runtime Manipulation of Android and iOS Applications - Mobile Security Testing
Hands-on exploration of runtime manipulation and memory analysis techniques for Android and iOS apps, enhancing mobile security testing skills using tools like cycript and snoop-it.
Bringing a Machete to the Amazon: Securing AWS Applications
Explore AWS security challenges, vulnerabilities, and new techniques for assessing and protecting cloud applications. Learn about potential pitfalls and strategies to secure your AWS infrastructure.
Ten Secrets to Secure Mobile Applications
Discover key strategies for securing mobile apps, focusing on encryption, web service design, and user privacy. Learn to threat model and address top vulnerabilities using OWASP Mobile Top Ten framework.
Warning Ahead: Security Storms Brewing in JavaScript
Explore JavaScript vulnerabilities, including unique issues, third-party platform exploits, and HTML5 security concerns. Learn about emerging threats and their impact on enterprise security.
Headless Browser Hide and Seek - Offensive Uses and Countermeasures
Explore offensive and defensive uses of headless browsers in web security. Learn techniques for detecting malicious activity, collecting threat forensics, and securing your own tools against potential vulnerabilities.
Hacking the Oracle Application Framework - Deep-Dive Penetration Testing Techniques
Explore deep-dive penetration testing techniques for complex enterprise applications, using Oracle Application Framework as a case study. Learn about static reverse engineering, mock environments, and dynamic monitoring.
Client-side Security with the Security Header Injection Module (SHIM)
Learn about client-side security headers and a new open-source tool for ASP.NET to mitigate vulnerabilities by setting security headers in web applications.
iOS App Integrity: Enhancing Security with Encrypted Code Modules
Explore iOS app security vulnerabilities and learn advanced protection techniques like Encrypted Code Modules (ECM) to safeguard against static analysis, binary patching, and other common attacks.
Modern Web Application Defense with OWASP Tools
Learn to defend web applications using OWASP tools. Explore XSS, CSRF, and other vulnerabilities through live demos. Gain practical skills to prevent attacks and secure your applications effectively.
Leveraging the Open Source Development Model Inside Companies
Explore how companies can adopt open source development practices internally to foster innovation, increase collaboration, and drive success in software projects.
Wyliodrin STUDIO - An Open Source Tool for IoT Development
Open-source Chrome extension for IoT development, offering a user-friendly programming environment with advanced IDE features. Simplifies board setup, supports multiple languages, and provides tutorials for beginners.
Improving Penetration Testing Efficiency with OWASP Code Pulse and Attack Surface Detector
Explore OWASP tools for efficient web app penetration testing: Code Pulse for real-time code coverage and Attack Surface Detector for comprehensive endpoint discovery, enhancing security assessment capabilities.
Dependency-Track: Intelligent Software Composition Analysis Platform
Explore Dependency-Track, an intelligent SCA platform for identifying and reducing risks from third-party components. Learn about its bill-of-material approach and automation options for continuous component analysis.
ZAP Heads Up Display - Introduction and Demo
Explore OWASP ZAP's new Heads Up Display feature for automated web application security testing. Learn about its capabilities, demo, hidden fields, attack modes, and integration with browser APIs.
Serverless Infections - Malware in Serverless Computing Environments
Explore security risks in serverless computing, including potential malware infections and data exfiltration. Learn about a novel RCE attack and best practices for securing serverless environments.
Novel Exploitation Techniques in WordPress - Prepared Statements and Object Injection
Explore novel WordPress exploitation techniques, focusing on a core design flaw leading to SQL injection and PHP object injection vulnerabilities. Learn prevention strategies for developers.
Building a Security Test Automation Framework
Learn best practices for building a security test automation framework using Docker, Kubernetes, and Defect Dojo. Discover how to manage vulnerabilities, prevent key sprawl, and implement security tooling in CI/CD pipelines.
Serverless Security: Functions-as-a-Service (FaaS) - Challenges and Best Practices
Explore serverless security, focusing on Functions-as-a-Service (FaaS) benefits and challenges. Learn about attack surfaces, third-party libraries, secrets management, encryption, and best practices for secure serverless development.