Detection and Efficiency Testing of Endpoint Security Sensors
Evaluación comparativa de soluciones de seguridad de endpoints, simulando ataques dirigidos para medir la eficacia en detección de amenazas mediante firmas, NGAV y aprendizaje automático.
Burpsuite Team Collaborator - Enabling Collaborative App Testing
Explore collaborative app testing with Burpsuite Team Collaborator. Learn features, sharing capabilities, and see a live demo for enhanced security assessments and teamwork.
Watching the Watchers - Exploiting Vulnerable Monitoring Solutions
Explore vulnerabilities in monitoring solutions and learn techniques to exploit them, enhancing your cybersecurity skills and understanding of potential risks in surveillance systems.
Meet Salinas - The First Ever SMS-Commanded Car Infotainment RAT
Discover how researchers created the first SMS-controlled malware for car infotainment systems, exploring vulnerabilities and potential threats in modern vehicle technology.
Automating Security Testing with Functional Testing Test Cases
Learn to automate security testing by integrating it with functional test cases, enhancing efficiency and coverage in software development processes.
Mobile Hacking - OWASP Mobile Project and How to Use It for White Hat Hacking
Explora los proyectos OWASP para seguridad móvil: MASVS para verificación y MSTG para pruebas e ingeniería inversa. Aprende a evaluar y mejorar la seguridad de aplicaciones iOS y Android.
Making Android's Bootable Recovery Work For You
Explore Android's bootable recovery mode to create custom tools for security testing, forensics, and device modification. Learn to build and customize recovery images for various Android devices.
Security Testing 4G - LTE Networks
Explore 4G/LTE network security, potential vulnerabilities, and testing methods. Learn about LTE deployments, attack vectors, and strategies for securing these networks.
Damn GraphQL - Attacking and Defending APIs
Explore GraphQL security: attack vectors, defense strategies, and hands-on learning with the Damn Vulnerable GraphQL Application. Gain insights into protecting this emerging API technology.
WAFs FTW! A Modern DevOps Approach to Security Testing Your WAF
Explore modern DevOps approach to security testing Web Application Firewalls (WAFs) using Framework for Testing WAFs (FTW). Learn objective WAF evaluation, rapid prototyping, and continuous testing strategies.
Application Security Playbook for Business
Learn strategies for implementing robust application security, addressing challenges, and achieving desired outcomes in today's rapidly evolving digital landscape.
Testing Security the Right Way
Integrating QA into security testing: strategies for comprehensive SDLC security, including examples and templates for immediate implementation in development projects.
Practical Attack Simulations in Critical National Infrastructure
Explore practical attack simulations in Critical National Infrastructure, focusing on risk reduction, threat modeling, and effective testing strategies for industrial control systems.
Doing This One Crazy Thing Will Change Your AppSec Program Forever
Discover how to revolutionize your AppSec program through effective communication, prioritization, and innovative strategies for securing software development.
A Stratagem on Strategy - Rolling Testing into Product Testing
Explore integrating security testing into product testing strategies, enhancing coverage and aligning security with software requirements for more effective quality assurance in the SDLC.
Security Testing - Is Automation Failing Us?
Explore the challenges of security testing automation and its impact on identity, privacy, and overall system protection in modern software development.
AppSec Pipelines and Event-based Security - Moving Beyond a Traditional Security Test
Strategies for scaling AppSec programs using automation, continuous health checks, and event-based security to keep pace with rapid software development and delivery in large organizations.
Your Security Tools Are Just a Stop-Gap to Secure DevOps
Secure DevOps: Beyond tools, focus on risk assessment, threat modeling, and custom security controls. Learn to integrate security effectively in CI/CD pipelines for robust application protection.
Be Mean to Your Code - Rugged Development & You
Pragmatic approaches and tools for ruggedizing your development lifecycle, from code commit to running system. Learn solutions for secure, resilient applications in fast-paced environments.
Getting Security Up to Speed with CI - CD
Automating security in CI/CD: Learn about Threadfix-Centric Application Security Architecture, challenges in AppSec testing, and leveraging QA regression for enhanced coverage.
Exploiting Unknown Browsers and Objects
Discover hidden browser vulnerabilities with the Hackability Inspector, a new offensive toolkit for security researchers to explore and exploit unknown entities in embedded browsers.