Testing iOS Apps without Jailbreak - Penetration Testing Techniques
Learn techniques for penetration testing iOS apps without jailbreaking, including live demos on accessing protected resources on the latest iOS version. Ideal for pentesters facing jailbreak limitations.
Turning Engineers into Extended Blue Team Members - Security Strategies
Strategies for empowering engineers to become part of the security team, including threat modeling, incident-driven learning, and security testing integration into development processes.
SUSTO: Systematic Universal Security Testing Orchestration
Explore systematic universal security testing orchestration for efficient vulnerability detection and management in software development lifecycles.
Real World Static Analysis for Real Humans
Explore practical static analysis techniques for software security, focusing on real-world applications and human-centric approaches to code analysis.
OWASP ZAP: Introduction to Web Application Security Testing
Explore OWASP ZAP's latest features, including automation, reporting, and out-of-band testing. Learn how this open-source tool enhances web application security through practical demonstrations and updates.
OWASP Web Security Testing Guide
Comprehensive guide for web security testing, covering methodologies and best practices to identify vulnerabilities and enhance application security.
Attacking Microservice Systems: Methods and Practical Tips
Discover methods and practical tips for attacking microservice systems, exploring new security architecture patterns and vulnerabilities specific to this increasingly popular design approach.
Testability Patterns for Web Applications - A New OWASP Project
Explore testability patterns for web applications in this OWASP project presentation, focusing on enhancing security testing effectiveness and efficiency.
Mobile Application Security Testing - Journey to Version 2.0
Explore the evolution of mobile app security standards and best practices in this insightful talk on the journey to OWASP Mobile Security Testing Guide v2.0.
Mobile Wanderlust - Our Journey to Version 2.0
Explore the evolution of mobile security testing with insights on OWASP's latest advancements and best practices for protecting mobile applications.
Security Testing for Smart Metering Infrastructure - BSidesLV 2014
Explore security testing for smart metering infrastructure, covering AMI hacks, test scopes, standards, and strategies for effective implementation and risk mitigation.
Fuzzing Frontiers - Exploring Unknown Vulnerabilities with Nuclei v3.2
Explore Nuclei v3.2's advanced fuzzing capabilities for uncovering unknown vulnerabilities. Learn to craft custom templates and import HTTP traffic, enhancing your security testing workflow and threat mitigation strategies.
Don't Panic: Common Blockchain Bugs and How to Find Them
Explore common blockchain bugs, their impact, and testing techniques. Learn about a new fuzzer for Substrate-based chains and see live demonstrations of typical vulnerabilities.
What Public Interest AI Auditors Can Learn from Security Testing - Legislative and Practical Wins
Exploring legal and practical strategies for AI auditors to overcome barriers in testing algorithmic bias, drawing lessons from security testing practices and advocating for policy changes.
From Security Testing to Deployment in a Single Pull Request
Automating cloud native app development with integrated security testing, from building and scanning to packaging and deployment, all within a single pull request for consistency and efficiency.
OWASP IoT Top 10 - Understanding Security Issues in Internet of Things
Explore key security vulnerabilities in IoT technologies and learn strategies to build, deploy, and assess IoT systems more securely with insights from the OWASP Internet of Things Project.
Virtual Device Fuzzing Support in QEMU
Explore virtual device fuzzing in QEMU, covering integration, frameworks, and techniques for effective testing and vulnerability detection in virtualized environments.
From Builds and CI to Security Testing in a Single PR
Streamline app development by integrating security testing into CI/CD pipelines. Learn to automate builds, vulnerability scans, and deployments within a single pull request using open-source tools.
Bugs in Blocks: Common Vulnerabilities in Blockchain Frameworks
Exploring common blockchain vulnerabilities, their impacts, and testing methods. Includes a demo of a fuzzer for Substrate-based chains to find typical bugs in blockchain systems.
Dynamic Program Analysis for Fun and Profit - Mentorship Session
Explore dynamic program analysis techniques for enhanced software quality and security. Learn practical applications and benefits in this insightful mentorship session.
How Crypto Can Be Broken By You - Workshop Day 1
Explore practical techniques to break cryptographic systems, enhancing your understanding of vulnerabilities and strengthening cybersecurity skills.