SQLMap - Security Development in Python
Explore Python-based security development with sqlmap, focusing on automated SQL injection detection and exploitation techniques for web application vulnerability assessment.
Is Your Code Tainted? Finding Security Vulnerabilities Using Taint Tracking
Discover taint tracking for identifying security vulnerabilities in code. Learn about sources, sinks, and sanitizers, and see a practical demonstration using a Django app.
Core Scheduling - Taming Hyper-Threads to Be Secure
Explore CPU vulnerabilities and core scheduling as a solution to keep hyperthreading secure. Learn about implementation, performance impacts, and future directions for this critical security feature.
Fuzz Testing Made Easy
Explore Go's native fuzz testing capabilities, including differential fuzzing and its mechanics, with a live demo of bug detection and resolution using this powerful tool.
Loopage
Explore JavaScript's evolution, event loops, and web development challenges with Douglas Crockford. Gain insights on threading, security, and the future of server-side JavaScript.
JavaScript Tools at Scale Using Type Information
Explore advanced JavaScript tools leveraging type information for enhanced static analysis, refactoring, and code safety in large-scale projects.
3.14 Things I Didn't Know About CSS
Discover obscure CSS facts, quirks, and security vulnerabilities with web standards expert Mathias Bynens in this entertaining and informative talk.
3.14 Things You Didn't Know About CSS - Updated
Discover obscure CSS facts, quirks, and unexpected security vulnerabilities in this talk by web standards enthusiast Mathias Bynens, exploring the hidden depths of Cascading Style Sheets.
Introduction to Web Security
Explore essential web security concepts and best practices to protect your applications from common vulnerabilities and attacks.
StrangerDanger - Finding Security Vulnerabilities Before They Find You
Explore security risks in NPM ecosystem, learn to identify and mitigate vulnerabilities in open-source dependencies using real-world examples and practical solutions.
The Code Behind The Vulnerability
Explore advanced web security vulnerabilities beyond SQL injection, focusing on issues in dictionaries, compression, and encryption to enhance your code's resilience against sophisticated attacks.
Megahertz, Gigahertz, Registers and Instructions - How Does a CPU Actually Work?
Explore CPU fundamentals, from basic operations to advanced optimizations. Learn about different processor architectures, internal workings, and future trends, including security challenges like Meltdown and Spectre.
Security Vulnerabilities Decomposition - Another Way to Look at Vulnerabilities
Explore a developer-friendly approach to software security by decomposing vulnerabilities into familiar security controls, shifting focus from compliance to proactive implementation throughout the development cycle.
The Anatomy of an Exploit
Explore security vulnerabilities and exploit development through hands-on examples, including a stack buffer overflow, to gain an attacker's perspective and enhance secure coding practices.
All Your Payment Tokens Are Mine - Vulnerabilities of Mobile Payment Systems
Uncover vulnerabilities in popular mobile payment systems, exploring offline schemes, practical attacks, and security flaws. Learn about potential risks and remedies in this eye-opening presentation.
Side-Channel Analysis of Dilithium in Hardware - Session VII
Explore side-channel analysis of Dilithium in hardware, focusing on breaking and protecting the Crystal implementation for post-quantum cryptography.
Understanding CSRF and SSRF Web Security Vulnerabilities - Demo and Examples
Explore CSRF and SSRF web security vulnerabilities through practical demonstrations, understanding attack mechanisms, key differences, and essential prevention strategies for robust application security.
Bypass Techniques for Door Entry Without Lock Manipulation
Discover advanced door bypass techniques and security vulnerabilities, exploring egress systems, access control hardware, and alternative entry methods without lock manipulation.
Prototype Pollution Leading to Remote Code Execution in NodeJS
Delve into prototype pollution vulnerabilities in Node.js, exploring how they enable remote code execution, analyzing real-world exploits, and understanding recent security mitigations.
Handling Security Vulnerabilities in Eclipse Projects - A Guide for Project Maintainers
Learn how to effectively handle security vulnerabilities in your projects, from initial reporting through resolution, using Eclipse Foundation's processes and new security management tools.
IoT Hacks Humans: Unexpected Angles of Human Process Compromise
Explore unexpected ways IoT devices can compromise human processes and security, examining vulnerabilities and potential attack vectors in connected systems.