Rock 'Em Sock 'Em Robots - Bot Swatting Like the Pros
Explore strategies for managing bot traffic, detecting malicious behavior, and improving data confidence in web systems. Learn to differentiate between beneficial and harmful bots.
Web Platform - The Secure Parts
Explore secure client-side web development techniques with Google Chrome developer advocate Mike West. Learn to leverage the right parts of web specifications for robust application security.
Defensive Programming - A Look at How to Break Your Web App
Explore common web security vulnerabilities and learn defensive programming techniques to protect your applications, with live demonstrations and practical examples.
Building Layers of Defense with Spring Security
Comprehensive guide to implementing multi-layered security in Spring applications, covering authentication, authorization, protection against common web vulnerabilities, and custom security configurations.
Common API Security Pitfalls
Explore common API security pitfalls, their root causes, and actionable solutions to protect your APIs from unauthorized access and account compromises.
Content Security Policies - Let's Break Stuff
Explore Content Security Policies: their importance, implementation, and impact on web security. Learn to protect against attacks, debug issues, and balance security with functionality.
Hack Like a Pro - Bug Bounties, Web Vulnerabilities & More
Explore ethical hacking, bug bounties, web vulnerabilities, and API security. Learn how to start in cybersecurity, understand ethical boundaries, and get tips for password management and bug hunting.
Instrument Flight Rules - Navigating Cyber Security in a Cloud Landscape
Explore modern cybersecurity challenges in cloud environments, learn strategies for data protection beyond traditional perimeters, and discover tools designed for cloud security in this insightful presentation.
CSP Analysis - Attacking XSS Mitigation
Explore Content Security Policy, its attack types, and effectiveness in mitigating XSS vulnerabilities in web applications.
AEZAKMI - Browser Anonymity & Fingerprinting Bypass
Explore AEZAKMI, a tool for browser anonymity and fingerprinting bypass. Learn how it obfuscates common parameters to enhance online privacy and support multi-account usage.
The Best Laid Schemes - Attacking URL Schemes
Exploring URL scheme vulnerabilities in web exploits, including SSRF and XXE attacks. Analyzes browser-specific attack surfaces and introduces a new Firefox 0day for arbitrary code execution.
Creating Browser Extensions to Hunt for Low-Hanging Fruit
Learn to create browser extensions for identifying security vulnerabilities, focusing on low-hanging fruit and efficient hunting techniques.
Innovative Approaches to Exploit Delivery
Innovative techniques for delivering exploits, combining research in exploit writing, browser and PDF exploitation, web hacking, and data representation. Includes demos of creative methods like "Javascript chameleons" and "exploitation by painting".
Defibrilating Web Security
Exploring fallacies in server-side web security and introducing innovative solutions, including contextual runtime taint tracking for Java and Ruby.
RedPhishing - Wi-Fi, Phishing and Red Teaming
Explore new techniques for attacking corporate WiFi networks during physical red teaming engagements, including evil twin attacks and exploiting OS trust in certificates. Learn about risks and protective measures.
Information Collection of Third-Party SDKs
Innovative static taint analyzer for third-party SDKs, addressing challenges in user data protection and privacy policy compliance. Achieves high accuracy in identifying undisclosed information collection behaviors.
API Security Through External Attack Surface Management
Integrating APIs into External Attack Surface Management to improve security posture. Discover and assess exposed assets, including APIs, for better protection and risk mitigation.
Hack In The Studio - Fireside Chat
Fireside chat with cybersecurity experts Stefano Zanero and Marco Balduzzi, discussing their research, experiences, and insights in malware analysis, cyberphysical security, and emerging threats in the digital landscape.
A Hipster History of CORS
Explore the evolution of CORS, its historical context, and modern cross-origin standards. Gain insights into web security and learn how to design secure web applications effectively.
Don't Get Owned by Your Dependencies
Explore innovative techniques for mitigating memory safety vulnerabilities in third-party C libraries, focusing on Firefox's lightweight in-memory sandboxing approach and the RLBox framework for efficient, secure application development.
Draco - A System for Uniform and Fine-grained Access Control for Web Code on Android
Explore Draco, a system for fine-grained access control of web code on Android, enhancing security and privacy for mobile applications and users.