Finding 0days in Enterprise Web Applications
Explore techniques for finding 0-day vulnerabilities in enterprise web applications, focusing on HCL Digital Experience, Solarwinds Web Help Desk, and Sitecore's Experience Platform.
Abusing Bleeding Edge Web Standards for Appsec Glory
Explore risks and mitigation strategies for modern web security standards like SRI, CSP, and HPKP. Learn about implementation challenges, trade-offs, and potential exploits in legacy applications.
Cross Site Scripting 101
Beginner-friendly introduction to Cross-Site Scripting (XSS) in web application security, including an overview and walkthrough of a basic XSS challenge from BSidesSF CTF.
Live Hacking - Breaking into Your Java Web App
Live demonstration of exploiting common Java vulnerabilities, showcasing real-world attacks and providing insights on protection strategies to enhance security awareness for developers.
Advanced Serverless Architectural Patterns on AWS
Explore advanced serverless patterns on AWS, focusing on best practices, cost optimization, and security considerations for efficient and scalable cloud-native architectures.
Getting Single Page Application Security Right
Explore SPA security challenges and solutions, covering XSS, CSP, session management, and CSRF in RESTful APIs. Learn practical strategies for building secure web applications using modern frameworks.
How to Properly Own APIs for Your First Valid Submission
Learn effective techniques for exploiting APIs to secure your first valid bug bounty submission, focusing on practical strategies and insider tips for successful API hacking.
The Power of Shodan - Leveraging Shodan for Critical Vulnerabilities
Explore Shodan's capabilities for identifying critical vulnerabilities in systems. Learn effective techniques to leverage this powerful search engine for enhanced cybersecurity and vulnerability assessment.
10 Things Developers Need to Know About Web Application Security
Explore 10 crucial web application security practices for developers, focusing on in-depth insights to make security engaging and integral to project development.
Content Security Policy to the Rescue
Learn to implement Content Security Policy to mitigate XSS vulnerabilities, prevent clickjacking, and enhance web application security through live demos and real-world examples.
Dip Your Toes in the Sea of Security
Explore essential web application security concepts, from secure PHP coding practices to Linux server protection, providing insights for developers of all levels.
Understanding the OWASP Top 10
Explore critical web application security flaws with examples and best practices. Learn to identify and address OWASP Top 10 vulnerabilities in PHP applications for improved website security.
Knock Knock - Understanding Who is Using Your Web Applications
Exploring advanced authentication techniques to enhance web application security without compromising user experience. Learn to prevent fraud and abuse through intelligent user verification.
From the OWASP Top Ten to the OWASP ASVS
Comprehensive overview of OWASP security standards, comparing Top Ten lists to the more detailed ASVS. Explores the evolution of web application security practices and provides insights for developers and testers.
CSRFT - A Toolkit for CSRF Vulnerabilities
Explore a Python-based toolkit for exploiting CSRF vulnerabilities, including demos of complex exploitation techniques and a custom HTTP proxy for injecting malicious iframes.
The Art of Exploiting Logical Flaws in Web Applications
Exploring techniques to detect and exploit logical vulnerabilities in web applications, focusing on manual testing methods and real-world examples from bug bounty programs.
The Road Towards 365 Bugs in Microsoft Office 365
Discover vulnerabilities in Microsoft 365 applications, including cross-tenant privacy leaks, SQLi, CSRF, SSRF, and XSS. Learn bug hunting techniques and tips for testing new Office 365 features.
Everybody Wants SOME - Advance Same Origin Method Execution
Explore advanced Same Origin Method Execution attacks, demonstrating real-world vulnerabilities and new approaches to exploit callback endpoints across major platforms.
Hacking Cookies in Modern Web Applications and Browsers
Explore cookie vulnerabilities in web apps and browsers, covering secure flags, HSTS, HttpOnly, domain attributes, and XSS via cookies. Learn to enhance web security from an expert.
Cookie Reuse
Explore cookie reuse vulnerabilities and their impact on web security, including demonstrations of exploits against major platforms and potential denial of service risks.
Exploiting Race Condition Vulnerabilities in Web Applications
Explore race condition vulnerabilities in web apps, their impact, and exploitation techniques. Learn about detection challenges, real-world scenarios, and a new penetration testing tool for identifying these elusive security flaws.