API Security Best Practices - Preventing Vulnerabilities and Hacks
Learn API security best practices, including BOLA vulnerability prevention, testing techniques, and strategies to protect against hacking through a demo-oriented session.
Securing Applications in SDLC and Cloud-Native Web and API Protection - Sessions 1 and 2
Learn secure coding practices, identify vulnerabilities, and integrate security into SDLC. Explore cloud-native WAAP for effective web app and API protection using machine learning.
Nikto Web Vulnerability Scanner - Web Penetration Testing
Learn to identify web vulnerabilities using Nikto, an open-source scanner. Explore its features and enhance your web application security skills.
Exploiting AI-Generated Code Vulnerabilities and Their Solutions
Discover vulnerabilities in AI-generated code and learn how to exploit and fix them. Gain insights into potential security risks and implement effective solutions using Snyk.
What's Not So New in the New OWASP Top 10 - Devoxx Poland 2022
Explore OWASP Top 10 updates, focusing on insecure design. Learn defense-in-depth strategies, secure design principles, and threat modeling methodologies like STRIDE for improved web application security.
AEM Hacker - Approaching Adobe Experience Manager Webapps in Bug Bounty Programs
Explore techniques for hacking Adobe Experience Manager webapps, including misconfigurations, vulnerabilities, and automation tools. Learn methodologies for bug bounty programs targeting AEM deployments.
Speed Bumps and Speed Hacks - Adventures in Car Manufacturing Security
Dive into critical security vulnerabilities affecting major car manufacturers' web applications, exploring real-world attacks, impact chains, and the importance of responsible disclosure policies.
The Art of Compromising Command and Control Servers - A Web Application Vulnerabilities Perspective
Dive into techniques for exploiting command and control server vulnerabilities, uncovering infrastructure weaknesses, and exposing threat actors through common web application security flaws.
How to Create a Forgotten Password System in PHP - Password Recovery by Email in PHP - PHP Tutorial
Learn to implement a secure forgotten password system in PHP using tokens, including creating forms, handling database operations, and sending recovery emails.
MERN Stack Authentication with JWT Access, Refresh Tokens, Cookies
Comprehensive guide to implementing secure MERN stack authentication using JWT tokens, covering route setup, controller methods, middleware creation, and API testing with Postman.
Postcards from the Post HTTP World - Amplification of HTTPS Vulnerabilities in the Web Ecosystem
Explore HTTPS vulnerabilities and their amplification in the web ecosystem, assessing impact on page integrity, authentication, and tracking through systematic evaluation of Alexa Top 10k websites.
How to Secure a Node.js Application End-to-End - 2019
Learn essential techniques for securing Node.js applications, protecting user data, and mitigating online threats in web development. Explore best practices and tools specific to Node.js-based servers.
The Case for Runtime Protection
Runtime protection: inoculating apps against vulnerabilities without changing code. Explores how instrumentation hardens applications, making OWASP Top Ten harder to exploit. Discusses accuracy, performance, and impact on security culture.
TMI - The Kinds of Data Your Applications Are Leaking
Explore how web applications inadvertently leak sensitive information, and learn techniques to identify and prevent data exposure in various online services.
Manual JavaScript Analysis is a Bug - Automating Security Assessments for Modern Web Applications
Automate JavaScript security assessments: Learn efficient methods for analyzing modern web apps, focusing on key areas and streamlining the process for better results.
Improving Dynamic Vulnerability Scanners with Static Code Analysis
Combining static code analysis and dynamic scanning to enhance vulnerability detection in web applications, improving security by identifying hidden endpoints and reducing false positives.
OWASP Top 10 Training - Part 4
Comprehensive exploration of OWASP Top 10 security vulnerabilities, offering insights and strategies for web application protection and risk mitigation.
OWASP Top 10 - Security Vulnerabilities A8 to A10 - 2017 Edition
Explore OWASP Top 10 vulnerabilities A8 to A10, focusing on insecure deserialization, using components with known vulnerabilities, and insufficient logging and monitoring.
OWASP Top 10 2017 - Security Vulnerabilities A4 to A8 - Part 3 of 5
Explore OWASP Top 10 vulnerabilities A4 to A8, gaining insights into critical web application security risks and effective mitigation strategies.
OWASP Top 10 - Vulnerabilities A2 to A4 - Part 2 of 5
Explore critical web application security risks A2-A4 from the OWASP Top 10, focusing on broken authentication, sensitive data exposure, and XML external entities.
OWASP Top 10 Security Risks - Part 1 of 5
Comprehensive overview of OWASP Top 10 security vulnerabilities, focusing on injection flaws and broken authentication. Learn to identify and mitigate critical web application risks.