Reversing Engineering Web Applications for Security - Behavior Analysis and WAF Detection
Explore web application reverse engineering, behavior analysis, and WAF detection techniques. Learn to create effective countermeasures against complex attacks using whitelist protection and traffic analysis.
Warning Ahead: Security Storms Brewing in JavaScript
Explore JavaScript vulnerabilities, including unique issues, third-party platform exploits, and HTML5 security concerns. Learn about emerging threats and their impact on enterprise security.
Headless Browser Hide and Seek - Offensive Uses and Countermeasures
Explore offensive and defensive uses of headless browsers in web security. Learn techniques for detecting malicious activity, collecting threat forensics, and securing your own tools against potential vulnerabilities.
Client-side Security with the Security Header Injection Module (SHIM)
Learn about client-side security headers and a new open-source tool for ASP.NET to mitigate vulnerabilities by setting security headers in web applications.
Modern Web Application Defense with OWASP Tools
Learn to defend web applications using OWASP tools. Explore XSS, CSRF, and other vulnerabilities through live demos. Gain practical skills to prevent attacks and secure your applications effectively.
Improving Penetration Testing Efficiency with OWASP Code Pulse and Attack Surface Detector
Explore OWASP tools for efficient web app penetration testing: Code Pulse for real-time code coverage and Attack Surface Detector for comprehensive endpoint discovery, enhancing security assessment capabilities.
ZAP Heads Up Display - Introduction and Demo
Explore OWASP ZAP's new Heads Up Display feature for automated web application security testing. Learn about its capabilities, demo, hidden fields, attack modes, and integration with browser APIs.
Novel Exploitation Techniques in WordPress - Prepared Statements and Object Injection
Explore novel WordPress exploitation techniques, focusing on a core design flaw leading to SQL injection and PHP object injection vulnerabilities. Learn prevention strategies for developers.
Building a Security Test Automation Framework
Learn best practices for building a security test automation framework using Docker, Kubernetes, and Defect Dojo. Discover how to manage vulnerabilities, prevent key sprawl, and implement security tooling in CI/CD pipelines.
Architecting for Security in the Cloud
Explore cloud security architecture, identifying vulnerabilities, and implementing robust defenses. Learn strategies to protect your applications from various attack vectors and ensure scalable, secure cloud deployments.
Juice Shop - OWASP's Most Broken Flagship
Explore OWASP's intentionally vulnerable web application, learn about its features, and discover how it can enhance your web security skills through hands-on hacking challenges.
Endpoint Finder: A Static Analysis Tool for Web Endpoint Discovery - Lightning Talk
Discover a static analysis tool for extracting web endpoints from JavaScript files, offering improved accuracy and reduced false positives compared to regex-based methods.
Clear Site Data Header: Inducing Amnesia in Browsers - AppSecCali 2019
Explore the Clear Site Data HTTP header's security and privacy benefits, its adoption, and implementation strategies for web developers and security teams.
Boosting the Security of Angular Applications
Boost Angular 2 app security: Learn about script-based threats, defenses, session management, CSRF, cookie flags, Authorization headers, and JWT tokens. Gain practical knowledge to effectively secure your applications.
Bot or Not? Mitigating Automated Threats to Web Applications
Explore automated threats to web applications and strategies for mitigating risks in this insightful presentation on cybersecurity challenges and solutions.
Analysis and Detection of Authentication Cross-Site Request Forgery - AppSec EU 2017
Explore seven strategies for detecting Authentication CSRF vulnerabilities, including a semi-automatic tool. Learn from real-world testing results on top websites and their security implications.
A Case for Integrity: JavaScript Apps Should Have It Too
Explore JavaScript app integrity with Pedro Fortuna, discussing cybersecurity challenges and innovative solutions for protecting client-side code in web applications.
Java LangSec - New Security Controls in Java 8 and 9
Explore new security controls in Java 8 and 9 with expert Jim Manico. Learn about Java LangSec and enhance your secure coding practices for web applications.
A Hybrid Approach for Web Application Penetration Testing
Explore a hybrid approach to web application penetration testing with expert David Caissy, combining manual and automated techniques for comprehensive security assessments.
Black-Box Approximate Taint Tracking by Utilizing Data Partitioning
Innovative black-box taint tracking system for detecting user input data injection in commands and SQL queries, offering cost-effective and performant runtime protection without code modifications.
A Static Tainting Analysis Method for Aspect-Oriented Programs
Introduces a new method for detecting vulnerabilities in aspect-oriented web applications, focusing on static tainting analysis to improve security in languages like AspectJ.