Intro to Hacking Web Applications by Arthur Kay

Описание

The vast majority of cyber attacks against a web application are relatively easy to defend – yet most applications remain vulnerable. In fact many developers aren’t even aware of how simple these attacks are to execute.

Spoiler alert: it’s really, really easy.

During this day-long workshop we’ll learn a variety of tools (including OWASP ZAP) to hack a vulnerable web application written in Node.js, Express and Angular. We’ll cover a variety of approaches to how attackers exploit web applications: everything from XSS and SQL injections, and lots of other hacking tricks.
Be prepared to learn, laugh and cry as we explore security flaws common to most web applications. You’ll leave this workshop with hands-on experience in penetration testing methodology, a deep understanding of the current OWASP best practices, and a broad appreciation for application security.

If you can’t protect your web applications from hackers, who will?

https://appsecil2020.sched.com/event/fBuh/intro-to-hacking-web-applications?iframe=no&w=100%&sidebar=no&bg=no