Chimera - Securing a Cloud App Ecosystem with ZAP at Scale
Explore Chimera: a cloud-based solution using ZAP to enhance security for small developers and ISVs in large app ecosystems, making advanced scanning tools accessible without security expertise.
Collective Detection of Harmful Requests
Explore collective detection techniques for identifying harmful web requests, enhancing application security through shared threat intelligence and collaborative defense strategies.
The Tales of a Bug Bounty Hunter - 10 Interesting Vulnerabilities
Explore 10 fascinating vulnerabilities discovered by a bug bounty hunter, offering insights into real-world security flaws and their implications for web application security.
The ABCs of Source-Assisted Web Application Penetration Testing
Learn advanced web application penetration testing techniques using source code analysis for improved vulnerability detection and assessment.
The Top 10 Web Hacks of 2015
Explore the most impactful web security breaches of 2015, gaining insights into vulnerabilities, attack methods, and essential defensive strategies for safeguarding web applications.
From Zero to Hero - How OWASP Saved My Holiday
Discover how OWASP resources can transform your cybersecurity skills and protect your digital life, as demonstrated through a real-world holiday scenario.
PDF - Mess With The Web
Explore PDF vulnerabilities and their impact on web security in this talk by Alex Infuhr, highlighting potential risks and mitigation strategies for developers and security professionals.
WebRTC Security - How Secure Is P2P Browser Communication?
Explore the security implications of peer-to-peer browser communication through WebRTC, examining potential vulnerabilities and best practices for secure implementation.
Security and Insecurity of HTTP Headers
Explore HTTP header security and vulnerabilities with Dirk Wetter. Learn about potential risks and best practices for implementing secure headers in web applications.
Using a JavaScript CDN That Cannot XSS You - With Subresource Integrity
Learn about Subresource Integrity, a security feature that protects against XSS attacks when using JavaScript CDNs, enhancing web application safety.
Server-Side Browsing Considered Harmful
Explore server-side browsing vulnerabilities and their potential risks in web applications. Learn detection techniques and mitigation strategies for improved security.
Hackazon: Stop Hacking Like It's 1999
Explore Hackazon, a modern vulnerable web app for testing security skills. Learn about its AJAX interface, RESTful APIs, and configurable vulnerabilities that challenge both automated scanners and manual pentesters.
Reversing Engineering Web Applications for Security - Behavior Analysis and WAF Detection
Explore web application reverse engineering, behavior analysis, and WAF detection techniques. Learn to create effective countermeasures against complex attacks using whitelist protection and traffic analysis.
Warning Ahead: Security Storms Brewing in JavaScript
Explore JavaScript vulnerabilities, including unique issues, third-party platform exploits, and HTML5 security concerns. Learn about emerging threats and their impact on enterprise security.
Headless Browser Hide and Seek - Offensive Uses and Countermeasures
Explore offensive and defensive uses of headless browsers in web security. Learn techniques for detecting malicious activity, collecting threat forensics, and securing your own tools against potential vulnerabilities.
Client-side Security with the Security Header Injection Module (SHIM)
Learn about client-side security headers and a new open-source tool for ASP.NET to mitigate vulnerabilities by setting security headers in web applications.
Modern Web Application Defense with OWASP Tools
Learn to defend web applications using OWASP tools. Explore XSS, CSRF, and other vulnerabilities through live demos. Gain practical skills to prevent attacks and secure your applications effectively.
Wyliodrin STUDIO - An Open Source Tool for IoT Development
Open-source Chrome extension for IoT development, offering a user-friendly programming environment with advanced IDE features. Simplifies board setup, supports multiple languages, and provides tutorials for beginners.
Improving Penetration Testing Efficiency with OWASP Code Pulse and Attack Surface Detector
Explore OWASP tools for efficient web app penetration testing: Code Pulse for real-time code coverage and Attack Surface Detector for comprehensive endpoint discovery, enhancing security assessment capabilities.
ZAP Heads Up Display - Introduction and Demo
Explore OWASP ZAP's new Heads Up Display feature for automated web application security testing. Learn about its capabilities, demo, hidden fields, attack modes, and integration with browser APIs.
Novel Exploitation Techniques in WordPress - Prepared Statements and Object Injection
Explore novel WordPress exploitation techniques, focusing on a core design flaw leading to SQL injection and PHP object injection vulnerabilities. Learn prevention strategies for developers.