How I Would Attack SQL Server
Explore SQL Server vulnerabilities and attack strategies from an adversary's perspective, learning detection, prevention, and response techniques for enhanced database security.
Developer Best Practices in SQL Server
Learn optimized T-SQL coding techniques for SQL Server, including Sarg-ability, performance improvement, SQL injection prevention, parameterization, and dynamic SQL best practices through real-world examples.
Secure Coding in Go - Avoiding Common Vulnerabilities
Learn secure coding practices in Go, focusing on common vulnerabilities like injections and XSS. Discover best practices, encryption basics, and proactive security measures for robust application development.
Securing Your Site Like It's 1999
Explore early web security challenges, from HTML issues to forum takeovers. Learn valuable lessons about navigating a world eager to exploit mistakes in online platforms.
Making Hacking Childs Play
Explore common online attacks executed by kids using simple tools, and learn essential strategies to secure your applications against various threat actors.
Practical Security for Web Applications
Explore effective methods to identify and avoid common security pitfalls in web applications, covering OWASP Top 10, code analysis, threat avoidance, and secure authentication practices.
Making the Most of Security Tests
Explore real-world security testing through a multi-layer product attack, covering various test types, their impacts, and strategies for improving overall product and environment security.
Secure Code, Safe Future: Mastering Security in Critical Software Development
Discover practical secure coding techniques and strategies for developing robust software, including vulnerability management, SBOM implementation, and hands-on security practices for critical infrastructure projects.
Time-Based SQL Injection Techniques and Defense Strategies
Dive into time-based SQL injection techniques through Operation GhostShell, featuring live demos and defense strategies for protecting against sophisticated database vulnerabilities.
SQL Injection Isn't Dead - Smuggling Queries at the Protocol Level
Dive into advanced SQL injection techniques and protocol-level query smuggling, exploring sophisticated database security vulnerabilities and modern attack vectors.
Don't Make These 10 SQL Mistakes
Avoid common SQL pitfalls: optimize queries, prevent injections, design efficient tables, handle NULL values, use transactions, and understand joins for better database performance.
Realistic Web CTF Walkthrough - JWT, API Hacking, SSRF, and SQLi
Walkthrough of NahamCon2024 Mission showcasing JWT tricks, API hacking, SSRF, and SQLi. Learn advanced web security techniques and bug bounty strategies from an experienced hacker.
Application Security from Start to Finish
Comprehensive guide to integrating security throughout the development process, covering secure environments, dependency management, vulnerability scanning, and advanced testing techniques.
Mirror Mirror - Reflected PDF Attacks Using SQL Injection
Explore advanced SQL injection techniques for exploiting PDF vulnerabilities, focusing on reflected attacks and their potential impact on web application security.
The Rise of Software Supply-Chain Attacks - How Secure is Your .NET Application
Explore software supply chain vulnerabilities in .NET applications, from infrastructure to CI/CD pipelines. Learn to identify and mitigate security risks across the development lifecycle.
Top War Stories from Bug Bounty Hunting - High-Severity Exploits and Discoveries
Dive into real-world bug bounty hunting experiences, exploring high-severity vulnerabilities worth $10k-$60k, from simple RCE exploits to complex PII leakages, with detailed technical insights and lessons learned.
SQL Injection Isn't Dead: Smuggling Queries at the Protocol Level
Explore advanced SQL injection techniques through protocol-level query smuggling, revealing how attackers can bypass security measures and exploit database connections for authentication breaches and data theft.
Don't Let Your Permissions Be Hijacked - Preventing Permission Exploitation in SQL Server
Discover techniques to prevent malicious users from exploiting power user permissions through permission hijacking, ensuring robust database security.
ActiveRecord::Encryption - Stop Hackers from Reading Your Data
Learn to encrypt data in Rails applications using ActiveRecord::Encryption. Explore implementation strategies, potential pitfalls, and real-world successes from GitHub's experience.
OWASP Top Ten - Understanding and Mitigating Critical Web Application Security Risks
Explore critical web application security risks, learn to identify and mitigate vulnerabilities, and integrate OWASP ZAP with Selenium for enhanced protection.
Live Hacking Your Web App: Exploiting Your Open Source Dependencies
Explore web app vulnerabilities through live hacking, focusing on exploiting open source dependencies. Learn to identify and mitigate security risks in your applications.