Preventing DoS Attacks in Node.js Applications - Security Best Practices
Master essential security techniques for protecting Node.js applications from DoS attacks, covering JSON parsing, XML bombs, regex vulnerabilities, and storage operations optimization.
Novel Sandboxing Techniques for Open Source Libraries Using eBPF and KRSI
Discover how to implement advanced sandboxing techniques for open source libraries using eBPF and KRSI technologies to enhance security and protect against vulnerabilities and exploits.
API Security Testing with Noname Security - Overview and Live Demo
Discover how to integrate API security testing into CI/CD pipelines with pre-production capabilities, ensuring rapid and secure API development through hands-on demonstrations.
Leveraging Fortinet FortiWeb and FortiSOAR for Enhanced Cybersecurity
Discover how FortiWeb and FortiSOAR integrate to provide robust cybersecurity through API discovery, machine learning, and cloud technology, demonstrated via real-world scenarios including drone-based attacks.
Leveraging HTTP Request Smuggling for Authentication Bypass and Remote Code Execution
Delve into HTTP Request Smuggling vulnerabilities, exploring real-world cases of authentication bypass and remote code execution in enterprise applications, with practical detection and mitigation strategies.
How Much Is The Phish? Evolving Defenses Against Evilginx Reverse Proxy Phishing
Dive into advanced techniques for defending against reverse proxy phishing attacks, focusing on Evilginx, MFA bypass methods, and implementing effective countermeasures.
Evolution of Open Source Software: Perspectives from a Decade of Project Maintenance
Gain insights into the evolution of open source software through a decade-long journey of maintaining OWASP ZAP, the world's most popular web vulnerability scanner, shared by project lead Simon Bennetts.
Hacking War Stories: From Prison Systems to Tech Companies - A Series of Unfortunate Events
Dive into real-world hacking adventures, from prison systems to major tech companies, exploring identification, exploitation techniques, and potential impact across different organizational contexts.
Smashing the State Machine: Advanced Web Race Condition Attacks
Discover advanced web race-condition attack techniques, from limit-overrun exploits to state machine manipulation, with practical methodologies and tools for identifying and exploiting vulnerabilities.
Breaking Microsoft Teams and SharePoint Through Migration APIs
Uncover critical security vulnerabilities in Microsoft SharePoint Online's migration APIs and learn how threat actors can exploit these features to compromise Microsoft 365 services and Azure Active Directory.
Exploiting Cloud Connectivity to Compromise Network-Attached Storage Devices
Uncover critical security vulnerabilities in NAS devices through cloud connectivity exploitation, focusing on WD and Synology systems' authentication weaknesses and remote access vulnerabilities.
A SSLippery Slope - Unraveling Hidden Dangers of Certificate Misuse
Uncover critical vulnerabilities in digital signature validation systems and learn how attackers can exploit certificate misuse to bypass security measures for signing untrusted code.
Vulnerabilities in Global Transportation Payment Systems - Security Risks and Exploits
Uncover critical security vulnerabilities in public transportation payment systems, focusing on Moovit's API weaknesses, unauthorized access risks, and solutions for protecting user data and preventing payment fraud.
Taking Down Applications with Logic - DEF CON 31
Dive into advanced application security techniques and learn how logical vulnerabilities can be exploited to compromise web applications, demonstrated through real-world examples.
BOLABuster - Harnessing LLMs for Automating BOLA Detection
Discover how to leverage LLMs for automated BOLA vulnerability detection in APIs and web applications, exploring BOLABuster's innovative approach to identifying critical security risks at scale.
Practical Exploitation of DoS in Bug Bounty Programs
Discover practical techniques for identifying and exploiting DoS vulnerabilities in bug bounty programs, covering N+1 errors, GraphQL crashing, and Cache Poisoning with real-world examples and responsible reporting practices.
Migrating from Google Cloud IoT Core to Eclipse Hono - Customer Experience
Discover how organizations successfully migrated from Google Cloud IoT Core to Eclipse Hono, exploring real-world implementation challenges, authentication solutions, and practical insights for seamless IoT platform transition.
One Auth to Rule Them All - Centralizing Authentication with Azure and API Gateway
Discover how to centralize authentication across applications using Azure SSO and AWS API Gateway, featuring practical insights on implementation challenges and developer adoption strategies.
Shield Your Backend from Outside Attacks with API Managers
Discover how to protect backend systems using API Managers, implement security layers, and defend against vulnerabilities while centralizing security configurations for robust API protection.
The Power of API-First Practices in Fashion Tech
Explore API-First practices in fashion tech, from ideation to execution. Learn how Inditex built an ecosystem empowering developers to innovate and ship faster.
RESTful API Patterns and Practices - Design to Workflow
Explore 75+ proven API patterns for design, client apps, services, data, and workflow. Learn to create flexible, resilient implementations solving real problems with clear, concise patterns.