About this Event
Abstract:
We’ve developed an interactive workshop for all those who want to learn secure coding practices and/or experience attacking with up-to-date technologies.
We prefer simplicity:
Attacks are performed with swagger and C# scripts, and exploit XSS, CSRF, SSRF, and SQLI. We’ll also steal secrets and cookies.
Secure coding practices are summarized in an easy-to-remember acronym (PREVENT).
Participants will transform RecipeRealm, a naive webapi+angular recipes repository, into a secure solution.
Through the hands-on real-world coding exercises, we will cover dealing with a vulnerable third party, using the built-in defense mechanism of Angular, implementing antiCSRF mechanisms, coding a secure data layer, and how to protect a web API from being exploited to get information about our internal assets.
Bios:
Or Sahar is a security researcher and the co-founder of Secure From
Scratch. With two decades of experience in software development and
security, she specializes in penetration testing, application security, and
instructing on secure coding practices. Currently pursuing a second
Master's degree in computer science, Or Sahar holds a BSc in software
engineering and is certified as an OSCE.
Yariv Tal
Senior developer turned security researcher, with 4 decades of programming experience, university lecturing and mentoring at bootcamps, he has a fresh look at the world of security, as an outsider looking in.
Event Venue & Nearby Stays
SpringHill Suites Las Vegas Convention Center, 2989 Paradise Road, Las Vegas, United States