Making It Easier for Everyone to Get Let's Encrypt Certificates with Certbot
Simplifying HTTPS adoption: Learn how Certbot streamlines Let's Encrypt certificate acquisition, enhancing website security and user privacy through improved accessibility and user-friendly design.
Prototype Pollution Attacks in NodeJS Applications
Explore prototype pollution attacks in NodeJS, including APIs vulnerable to pollution, potential impacts, and defensive strategies. Learn from real-world examples and security research findings.
Abusing Webhooks for Command and Control
Explore techniques for establishing covert command and control communication using webhooks, bypassing strict network defenses and avoiding detection in penetration testing scenarios.
Backslash Powered Scanning - Implementing Human Intuition
Innovative web scanner using intuitive techniques to detect injection vulnerabilities, offering WAF evasion, minimal network footprint, and adaptability to input filtering. Explores advanced exploitation methods and handles complex findings.
Threat Modeling for the Gaming Industry
Explore gaming industry security challenges, focusing on client-side logic, network protocols, account management, and untrusted platforms to enhance overall security and user experience.
Pwning Software-Defined Networking - SDN
Explore software-defined networking vulnerabilities, focusing on OpenFlow, controllers, and REST APIs. Learn to manipulate traffic flow and exploit SDN weaknesses.
Federated Login CSRF
Explore federated login CSRF vulnerabilities in OpenID Connect and OAuth 2.0, examining attack scenarios, risks, and mitigation strategies for secure identity linking in web applications.
Building Secure ASP.NET Core MVC Applications
Explore ASP.NET Core MVC security features, including XSS and CSRF protection. Learn to build robust web applications with modular architecture and cross-platform compatibility.
Differences Between Web Application Scanning Tools When Scanning for XSS and SQLi
Investigates differences between web application scanning tools for XSS and SQLi, addressing challenges in modern web architectures and suggesting improvements for effective vulnerability detection.
Next Gen Web Pen Testing - Handling Modern Applications in a Penetration Test
Explore modern web application security testing techniques, including HTTP/2, WebSockets, CORS, REST APIs, and Content Security Policy. Learn to adapt penetration testing methods for evolving technologies.
Compression Bombs Strike Back
Explore data compression risks, HTTP vulnerabilities, and server attack techniques in this comprehensive security analysis of compression-related threats.
Sinking Your Hooks in Applications
Techniques for automatically enhancing application security through code hooking and injection, demonstrated across Java, .NET, and Ruby frameworks without requiring developer intervention.
The Node.js Highway - Attacks Are At Full Throttle
Explore Node.js security vulnerabilities, attack vectors, and best practices for safeguarding applications in this comprehensive overview of potential threats and defensive strategies.
The Emperor’s New Password Manager - Security Analysis of Web-based Password Managers
Security analysis of web-based password managers, revealing vulnerabilities in features like one-time passwords and bookmarklets. Explores diverse root causes and provides guidance for improving password manager security.
AutoScaling Web Application Security in the Cloud
Explore auto-scaling web application security in cloud environments, focusing on practical examples using AWS. Learn techniques, tools, and strategies for effective security implementation in rapidly scaling applications.
Creating a Buzz - Tales of Building WordPress Honeypots at Scale
Explore the world of WordPress honeypots, their deployment at scale, and surprising insights into black-hat tactics in this intriguing cybersecurity presentation.
CSP Pitfalls and Gotchas
Explore common pitfalls and gotchas in Content Security Policy implementation, focusing on whitelist issues, SameOrigin policy, and unsafe inline practices. Learn strategies for building a robust security framework.
Getting Started with Oracle Cloud Infrastructure Storage Services
Explore Oracle Cloud Infrastructure's high-performance, cost-effective storage solutions for enterprise workloads. Learn about local, object, file, block, and archive storage services and their key features.
Cloud Platform and Middleware Strategy and Roadmap
Explore Oracle's cloud platform services and on-premise software strategy, covering workload modernization, SaaS transition, API-first applications, IT optimization, and real-time analytics for digital transformation.
Store and Analyze JSON Data Using the Oracle API for MongoDB and SQL/JSON
Learn to leverage MongoDB API with Oracle Autonomous Database for JSON data storage and analysis. Explore microservice development, SQL querying, and data visualization using Oracle's powerful database tools.
Testmark: A Markdown Convention for Test Fixtures and Data - Eric Myhre
Discover Testmark: a Markdown convention for test fixtures and data. Learn syntax, libraries, and real-world applications for keeping documentation and examples up-to-date across multiple programming languages.