Mystique - Uncovering Information Leakage from Browser Extensions
Explore privacy risks of browser extensions, uncovering information leakage through taint tracking and data flow analysis techniques.
PASTA - Password-Based Threshold Authentication
Explore password-based threshold authentication with PASTA, a novel framework distributing identity verification among servers for enhanced security against token forgery and offline attacks.
Hacking - Intro to Cross Site Scripting
Learn about Cross Site Scripting (XSS), its types, and prevention techniques. Understand the risks of this common web vulnerability and how to secure your applications against potential attacks.
A User Oriented Approach and Tool for Security and Privacy Protection on the Web
Explore web security challenges, user-centric approaches, and innovative tools for protecting against threats. Learn about JavaScript monitoring, machine learning applications, and future cybersecurity visions.
Cyber-Physical Security - Dr. Bruce DeBruhl
Explore cyber-physical security, including system models, attack examples, and modern contexts. Learn about securing critical infrastructure and emerging challenges in networked control systems.
Browser Exploitation - Max Zinkus
Explore JavaScript-based browser exploitation techniques, including XSS, JIT compilation vulnerabilities, and shellcode execution. Learn about browser security measures and how to find and chain exploits.
Data Loss Prevention: Databases and Web Security
Explore web vulnerabilities, SQL injection, and database security techniques to enhance your cybersecurity skills and protect against data loss.
Cross Origin Resource Sharing - Explained by Example
Explains CORS errors and solutions through practical examples, covering common issues like missing headers, preflight requests, and content-type restrictions.
What Happens When Your Web Server Private Key Is Leaked?
Explore the risks of leaked web server private keys, understanding their role in TLS protocols, digital signatures, and best practices for key management and rotation.
Getting Started with Command Injection
Learn to exploit Command Injection vulnerabilities with a comprehensive guide covering theory, code review, and hands-on labs to enhance your cybersecurity skills and understanding of this dangerous vulnerability.
Security for the People: End-User Authentication on the Internet - Mark Stanislav
Learn about end-user authentication security on the internet, covering two-factor deployments, browser security features, SSL/TLS implementations, and more. Gain insights into research methodology and lessons learned.
Bypassing Internet Explorer's Cross-Site Scripting Filter - Security Techniques
Explore techniques for bypassing Internet Explorer's cross-site scripting filter, enhancing your understanding of web security vulnerabilities and defense mechanisms.
Attacking Drupal - Security Vulnerabilities and Exploitation Techniques
Explore techniques for exploiting vulnerabilities in Drupal websites, focusing on common attack vectors and security weaknesses in this popular CMS platform.
Practical Side Channel Attacks on Modern Browsers - Lecture 6
Explore practical side channel attacks on modern browsers, covering XSS filters, timing attacks, clipboard vulnerabilities, and more. Learn about login history exploits and data URI schemes.
Web Pen-Testing Workshop: HTML and JavaScript Injection (XSS) - Part 9
Learn HTML and JavaScript injection techniques for web security, including encoding, data capture, and attack mitigation strategies.
Web Penetration Testing Workshop: SQL Injection - Part 2 of 12
Learn SQL injection techniques for web penetration testing, covering methods to identify and exploit database vulnerabilities in web applications.
Web Penetration Testing Workshop - Introduction to Mutillidae, Burp Suite, and Injection - Part 1
Learn web penetration testing essentials, including Mutillidae, Burp Suite, and injection techniques. Gain hands-on experience with key tools and understand fundamental concepts for ethical hacking.
Fun with WebSockets Using Socket Puppet
Explore WebSocket technology and its security implications using Socket Puppet. Learn practical techniques for testing and exploiting WebSocket vulnerabilities in web applications.
Out of Character Use of Punycode and Homoglyph Attacks to Obfuscate URLs for Phishing
Explore techniques for URL obfuscation in phishing attacks, including punycode and homoglyphs. Learn about browser protections, registrar defenses, and strategies to mitigate these threats.
Cookie Cadger: Taking Cookie Hijacking to a New Level
Explore advanced cookie hijacking techniques and their implications for web security in this comprehensive presentation on Cookie Cadger.
HTML5 Security Vulnerabilities and Attacks - Taking a Byte Out of HTML5
Explore HTML5 security vulnerabilities and attacks, including client-side threats, browser support issues, and defensive strategies using the SHARK repository and testing environment.