Secure AI: Integrating OWASP Principles in Machine Learning Model Development
Explore integrating OWASP principles into machine learning model development to address vulnerabilities, ensure data privacy, and safeguard AI systems from potential threats, ensuring robustness and confidentiality.
The Hacker's Guide to Kubernetes Security Risks and Vulnerabilities
Explore Kubernetes security risks, vulnerabilities, and best practices through live demos of OWASP Top 10 exploits, enhancing your cluster hardening skills.
Securing and Trusting Third-Party Javascripts in Your Web App
Learn techniques to secure and trust third-party JavaScript in web applications, enhancing overall security and mitigating potential vulnerabilities.
Request Smuggling 101
Explore HTTP Request Smuggling attacks, risks, and payloads. Learn to detect and mitigate vulnerabilities in load balancers and proxies. Includes live demonstration and practical mitigation strategies.
Explotación de deserializaciones en Aplicaciones Web
Introducción a vulnerabilidades de deserialización en aplicaciones web: identificación, desafíos de explotación y creación de PoC funcionales para diversas tecnologías.
Injecting Security into Web Apps
Explore innovative approaches to web application security beyond traditional WAFs, focusing on internal application monitoring and real-time threat detection to prevent zero-day attacks and data exfiltration.
HTML5 Something Wicked This Way Comes
Exploring HTML5's security vulnerabilities and advanced UI-Redressing techniques, demonstrating how attackers can exploit seemingly minor flaws in web applications for malicious purposes.
An Introduction to Container Hacking
Explora técnicas de hacking en contenedores, abordando vulnerabilidades y mejores prácticas de seguridad en entornos DevSecOps y tecnologías cloud con el experto Rory McCune.
A Race Against Time - How to Exploit Race Conditions in Web Apps
Explora la explotación de condiciones de carrera en aplicaciones web, presentando herramientas de prueba y demostraciones de escenarios de ataque del mundo real.
HTTP Security Headers - A Technology History Through Scar Tissue
Explore HTTP security headers, their evolution, and best practices. Learn to leverage browser-built security controls, with a focus on implementing effective content-security-policy for enhanced web application protection.
Caught My WebApp Cheating on Me
Exploring techniques to detect and prevent client-side injections and tampering in web applications, ensuring integrity and security of code executed in the browser.
Automating Web Application Bug Hunting
Discover techniques for automating web application vulnerability scanning to enhance bug bounty hunting and application security analysis efficiency.
The Power of Guardrails - How to Slash Your Risk of XSS in Half
Discover how secure code defaults can significantly reduce XSS vulnerabilities and elevate overall security. Learn strategies to implement effective guardrails and minimize recurring security risks.
Padding Oracles Everywhere
Explore padding oracle attacks in cryptography, their widespread impact, and practical exploitation techniques in various systems and protocols.
ToStaticHTML for Everyone - About DOMPurify
Exploring DOM-based XSS sanitation challenges and introducing DOMPurify, a novel solution for secure client-side filtering in modern web applications.
HTTP Time Bandit
Explore HTTP-based Denial of Service attacks, focusing on a novel method using time-based techniques. Learn about attack classification, mitigation strategies, and tools for identifying vulnerabilities in web applications.
Esoteric Web Application Vulnerabilities
Explore uncommon web application vulnerabilities with expert Andres Riancho. Gain insights into esoteric security flaws and enhance your penetration testing skills.
Unicode Vulnerabilities That Could Byte You
Explore Unicode vulnerabilities in web applications, including normalization, capitalization misuse, and encoding conversion risks. Learn about HostSplit, HostBond attacks, and Punycode exploitation.
Building Secure ASP.NET Core MVC Applications
Explore ASP.NET Core MVC security features, including XSS and CSRF protection. Learn to build robust web applications with modular architecture and cross-platform compatibility.
Differences Between Web Application Scanning Tools When Scanning for XSS and SQLi
Investigates differences between web application scanning tools for XSS and SQLi, addressing challenges in modern web architectures and suggesting improvements for effective vulnerability detection.
The Node.js Highway - Attacks Are At Full Throttle
Explore Node.js security vulnerabilities, attack vectors, and best practices for safeguarding applications in this comprehensive overview of potential threats and defensive strategies.