Modern Web Application Bugs
Explore emerging web vulnerabilities, their occurrence in modern applications, and strategies for detection and prevention in this comprehensive overview.
Securing Web Applications and APIs with ASP.NET Core 2.2 and 3.0
Comprehensive overview of ASP.NET Core security features, focusing on API security with IdentityServer4. Covers authentication, authorization, and identity management for modern web applications.
Practical Security for Web Applications
Explore effective methods to identify and avoid common security pitfalls in web applications, covering OWASP Top 10, code analysis, threat avoidance, and secure authentication practices.
Securing Web Applications and APIs with ASP.NET Core 2.2 and 3.0
Explore ASP.NET Core's security features, focusing on API protection using IdentityServer4. Learn about standards-based authentication and single sign-on for robust web application and API security.
Securing Web Applications and APIs with ASP.NET Core 2.2 and 3.0
Explore ASP.NET Core's security features, focusing on API protection using IdentityServer4. Learn about authentication, single sign-on, and standards-based security for web applications.
Securing Web Applications and APIs with ASP.NET Core 2.2 and 3.0
Explore ASP.NET Core's security features, focusing on API security with IdentityServer4. Learn about authentication, authorization, and modern application security practices.
Securing Web Applications and APIs with ASP.NET Core 2.2 and 3.0
Explore ASP.NET Core's security features, focusing on API security with IdentityServer4. Learn about authentication, authorization policies, and resource-based security for modern web applications.
Modern Web Application Bugs
Explore modern web vulnerabilities, including XXE, deserialization attacks, template injection, SSRF, and subdomain takeover. Learn detection and prevention techniques for emerging security threats.
Modern Web Vulnerabilities 2020
Explore modern web vulnerabilities, including insecure deserialization, SSRF, ESI injection, prototype pollution, and HTTP request smuggling, with demos and prevention strategies.
The OWASP Top Ten Proactive Controls 2018
Explore critical security techniques for web application development, including secure coding practices, data protection, and access control, as outlined in the OWASP Top Ten Proactive Controls 2018.
Abusing Webhooks for Command and Control
Explore techniques for exploiting webhooks as command and control channels in cybersecurity. Learn about potential vulnerabilities and defensive strategies.
The Mines of Kakadûm: Blindly Exploiting Load-Balanced Services
Explore techniques for blindly exploiting load-balanced services in "The Mines of Kakadûm" presentation, uncovering vulnerabilities in distributed systems.
Secure By Default Web Applications With Apache Sling
Build a threat model and implement security best practices for web applications using Apache Sling, eliminating entire vulnerability classes proactively.
Free Web App Pentesting Tools and Resources
Discover essential free tools and resources to enhance your web app pentesting and bug bounty skills. Learn about Caido, Burp Suite, browser plugins, and hands-on learning platforms.
Securing Web Applications Without Slowing Your Pace of Innovation
Leverage WAF, API, and Fraud defenses to protect applications, websites, and APIs from DDoS attacks, API abuse, and bot fraud while maintaining innovation pace.
Cypress vs Rest Assured vs Postman - Who Rules the Cookie Kingdom?
Explore cookie-based authentication tools: Cypress, Rest Assured, and Postman. Compare speed, stability, integration, and versatility for mastering web application security and automated login flows.
Caido - Web Application Security Testing Tool Overview and Demonstration
Explore Caido, a powerful web application testing tool. Learn its workflows, bypass techniques, and scripting capabilities to enhance your cybersecurity toolkit and improve penetration testing skills.
The History of the OWASP Developer Guide
Explore the evolution of OWASP's pioneering project, from its inception to recent developments, and discover its impact on secure software development practices.
Break the Wall: Automated Discovery of Protocol-Level Evasion Vulnerabilities in Web - Session 584
Automated discovery of protocol-level evasion vulnerabilities in web applications, focusing on bottom-up approaches to identify and exploit security weaknesses.
Securing SPAs and Blazor Applications Using the BFF - Backend for Frontend - Pattern
Explore secure authentication patterns for modern web apps, focusing on the Backend for Frontend (BFF) approach for robust token-based security in SPAs and Blazor applications.
The Last XSS Defense Talk
Comprehensive exploration of modern XSS defense strategies, covering JavaScript frameworks, CSP deployment, HTML sanitization, and design considerations for building secure web applications.