Ultimate Dom Based XSS Detection Scanner on Cloud
Learn advanced techniques for detecting DOM-based XSS vulnerabilities using cloud-based scanning tools, enhancing web application security.
Comprehensive Virtual Appliance Detection
Explore techniques for detecting virtual appliances, including resolution analysis, HTML5 feature support, and 3D performance observations. Learn practical methods for identifying virtualized environments.
Truncating TLS Connections to Violate Beliefs in Web Applications
Exploring TLS truncation attacks to exploit web application flaws, demonstrating vulnerabilities in authentication systems and their impact on popular platforms like Helios, Microsoft Live, and Google.
Dissecting CSRF Attacks & Countermeasures
Explore CSRF attacks, current countermeasures, and a proposed header-based policy for improved web security. Learn detection techniques and a new concept called Storage Origin Security for simplified protection.
Big Data for Web Application Security
Explore how big data analytics can enhance web application security, with real-world examples of proactive and reactive security measures using MapReduce and Cascading.
Million Browser Botnet
Explore how online advertising networks can be exploited to create massive browser botnets, enabling DDoS attacks, spam campaigns, and password cracking without malware or zero-day vulnerabilities.
Clickjacking Revisited - A Perceptual View of UI Security
Explores UI security vulnerabilities from a perceptual perspective, presenting novel attacks that bypass current defenses and discussing potential countermeasures and their limitations.
SSL, Gone in 30 Seconds - A BREACH Beyond CRIME
Unveiling new techniques to extract encrypted secrets from HTTPS channels, demonstrating a practical attack against enterprise products and discussing mitigation strategies.
Web Application Security
Explore web application security fundamentals and best practices with expert Jeremiah Grossman in this comprehensive conference talk from Black Hat Europe 2001.
Web Application Security
Explore web application security fundamentals, vulnerabilities, and best practices with industry experts Dennis Groves and Bill Pennington in this comprehensive conference talk.
Web Hacking Part 1 & 2
Explore advanced web hacking techniques and vulnerabilities in this comprehensive two-part session, covering essential skills for ethical hackers and cybersecurity professionals.
Windows 2003 - Web Application Security
Explore web application security vulnerabilities and defense strategies for Windows 2003 servers, focusing on practical techniques and real-world scenarios.
Web Application Security and Release of "WhiteHat Arsenal"
Explore web application security and the "WhiteHat Arsenal" tool, focusing on vulnerabilities, attack methods, and defensive strategies for Windows systems.
Concurrency Oriented Programming in a Modern World
Explore Erlang's concurrency model and its impact on modern software development, from microservices to IoT. Learn how functional programming principles enable fault-tolerant, distributed systems in cloud and edge computing.
Attacking the WebAssembly Compiler of WebKit
Explore vulnerabilities in WebKit's WebAssembly compiler, focusing on recent updates and new features. Learn about potential security risks and attack surfaces in browser implementations.
Design for Developers
Discover essential design principles for web developers, covering color theory, typography, layout, and user research. Learn to create communicative visuals and validate design decisions.
Building a Backend-less URL Shortener
Learn to build a serverless URL shortener using only YAML, integrating authorization and a database for scalability while reducing latency and costs. Explore gateway-based business logic and security.
You Really Don't Need All that JavaScript, I Promise
Challenging JavaScript-first development, this talk explores practical strategies for building interactive websites with minimal reliance on JavaScript frameworks, emphasizing a balanced approach to web development.
White-Hat Attention Jacking for Accessibility, Fun and Profit
Explore psychological principles and design techniques to capture and maintain user attention, enhancing accessibility and user experience for diverse audiences, including those with cognitive challenges.
Designing APIs for 150 Million Orders
Strategies for designing scalable APIs to handle high-volume orders, focusing on DDD, microservices, and frontend best practices like BFF and SSR for modern, distributed systems.
OAuth Tokens As Your Identity API
Explore OAuth and OpenID Connect for secure, scalable identity management in distributed systems. Learn to leverage tokens for user permissions, tracing, and delegation across complex networks.