Linux Security - Securing Nginx
Comprehensive guide to securing Nginx on Linux servers, covering setup, configuration, and auditing best practices for enhanced web server protection.
Finding and Exploiting Novel Flaws in Java Software
Explore techniques for discovering and exploiting vulnerabilities in Java applications, focusing on novel flaws and advanced security research methodologies.
Turbo Intruder: Abusing HTTP Misfeatures to Accelerate Web Application Attacks
Explore advanced HTTP exploitation techniques using Turbo Intruder, a high-speed Burp extension for automated web application attacks, with insights on payload generation and response analysis.
Burp Suite Pro Features and Walkthrough
Explore advanced features of Burp Suite Pro for ethical hacking and web application security testing. Learn powerful tools to enhance your penetration testing skills.
How to Shot Web: Successful Tactics and Tools for Bug Hunting
Explore successful tactics, tools, and methodologies used by top bug hunters to improve your web and mobile app hacking skills for claiming bug bounties.
Cloud Native Minification Techniques and Vulnerability Assessments
Explore minification techniques and vulnerability assessments for optimizing cloud-native applications, enhancing security and performance.
How to Achieve Comprehensive Protection for Cloud Native Applications and Workloads
Learn comprehensive protection strategies for cloud-native applications, covering web security, runtime risks, and predictive models. Explore practical solutions and benefits through demos and real-world examples.
SyzScope: Revealing High-Risk Security Impacts of Fuzzer-Exposed Bugs
Explore SyzScope, a tool revealing high-risk security impacts of fuzzer-exposed bugs. Learn about its workflow, fuzzing techniques, and symbolic execution for effective vulnerability assessment.
Injecting Security to the Cloud
Learn strategies for enhancing cloud security, focusing on automated injection techniques and best practices for safeguarding cloud-based infrastructure and applications.
Project Monterey: Automating Security Testing in Cloud Deployments
Explore automated security testing for cloud deployments with Project Monterey. Learn how Netflix scales traditional tools and integrates custom solutions for continuous security in a dynamic environment.
Misconfigured CORS and Web Application Security Challenges
Explore CORS misconfiguration vulnerabilities and the challenges of implementing advanced browser security features, with insights on balancing security and operational complexity.
QARK: Android App Exploit and Static Code Analysis Tool
Explore QARK, a comprehensive tool for Android app security analysis and exploitation. Learn how it combines static code analysis, vulnerability detection, and automatic exploit generation for developers and pentesters.
Mobile Application Assessments By The Numbers - A Holistic View
Explore mobile app security through data-driven insights, examining vulnerabilities and best practices for comprehensive assessments in this OWASP presentation.
PDF - Mess With The Web
Explore PDF vulnerabilities and their impact on web security in this talk by Alex Infuhr, highlighting potential risks and mitigation strategies for developers and security professionals.
Server-Side Browsing Considered Harmful
Explore server-side browsing vulnerabilities and their potential risks in web applications. Learn detection techniques and mitigation strategies for improved security.
Bringing a Machete to the Amazon: Securing AWS Applications
Explore AWS security challenges, vulnerabilities, and new techniques for assessing and protecting cloud applications. Learn about potential pitfalls and strategies to secure your AWS infrastructure.
Warning Ahead: Security Storms Brewing in JavaScript
Explore JavaScript vulnerabilities, including unique issues, third-party platform exploits, and HTML5 security concerns. Learn about emerging threats and their impact on enterprise security.
Hacking the Oracle Application Framework - Deep-Dive Penetration Testing Techniques
Explore deep-dive penetration testing techniques for complex enterprise applications, using Oracle Application Framework as a case study. Learn about static reverse engineering, mock environments, and dynamic monitoring.
Juice Shop - OWASP's Most Broken Flagship
Explore OWASP's intentionally vulnerable web application, learn about its features, and discover how it can enhance your web security skills through hands-on hacking challenges.
Endpoint Finder: A Static Analysis Tool for Web Endpoint Discovery - Lightning Talk
Discover a static analysis tool for extracting web endpoints from JavaScript files, offering improved accuracy and reduced false positives compared to regex-based methods.
A Hybrid Approach for Web Application Penetration Testing
Explore a hybrid approach to web application penetration testing with expert David Caissy, combining manual and automated techniques for comprehensive security assessments.