Monthly Archives: November 2012

Passwords and Credit Card Numbers Hacked! SQL Injection Explained YouTube

November 30th, 2012 📆 | 3636 Views ⚑

video, sharing, camera phone, video phone, free, upload 2012-11-30 21:54:36 source

Tagged with: credit • explained • hacked • injection • numbers • passwords • youtube

Vulnerability Management – Making the Process Work

November 30th, 2012 📆 | 6703 Views ⚑

What’s your process for managing security vulnerabilities? A 100+ page report from your Vulnerability Scanner can be paralyzing for Operations.

Tagged with: making • management • process • vulnerability

Man…or Astro Man? – Defcon 5

November 30th, 2012 📆 | 3589 Views ⚑

Analog Series Vol.1, 7″, 2012 2012-11-30 10:34:49 source

Tagged with: astro • defcon

#HITB2012KUL D2T1 – Shreeraj Shah – XSS & CSRF Strike Back — Powered by HTML5

November 30th, 2012 📆 | 4895 Views ⚑

PRESENTATION MATERIALS: http://conference.hitb.org/hitbsecconf2012kul/materials/ PRESENTATION ABSTRACT: HTML5 has empowered browser with a number of new features and functionalities. Browsers with this

Tagged with: hitb2012kul • html5 • powered • shreeraj • strike

Comedy Hack Day NYC

November 29th, 2012 📆 | 3806 Views ⚑

Watch the demos from the first ever Comedy Hack Day! 21:00 the stream actually starts 1. Lobbyists from Last Night

Tagged with: Comedy

Xenotix XSS Exploit Framework v.2 Released

November 29th, 2012 📆 | 6694 Views ⚑

Xenotix XSS Exploit Framework is a penetration testing tool to detect and exploit XSS vulnerabilities in Web Applications. This tool

Tagged with: exploit • framework • released • xenotix

Computer and Cellular Forensics Investigations

November 28th, 2012 📆 | 6962 Views ⚑

Computer Evidence Recovery Expert Kevin Ripa talks about hiring a computer or cellular forensics specialist, how it can improve your

Tagged with: cellular • computer • forensics • investigations

xss

November 28th, 2012 📆 | 4259 Views ⚑

Likes: 0 Viewed: source

The 7 Qualities of Highly Secure Software, Mano Paul

November 28th, 2012 📆 | 5063 Views ⚑

Title: The 7 Qualities of Highly Secure Software Abstract The applications on the web, mobile, and the cloud, all have

Tagged with: highly • qualities • secure • software

Xenotix XSS Exploit Framework 2012 v2

November 28th, 2012 📆 | 8078 Views ⚑

Xenotix XSS Exploit Framework is a penetration testing tool to detect and exploit XSS vulnerabilities in Web Applications. This tool

Tagged with: exploit • framework • xenotix

Let's Play DEFCON [Rob and Steve Play That Game]

November 27th, 2012 📆 | 7554 Views ⚑

Steve and I finally go to war, nuclear war. We sit down and go head to head in DEFCON, the

Tagged with: defcon • steve

Securing the SSL channel against man-in-the-middle attacks – Tobias Gondrom

November 27th, 2012 📆 | 1565 Views ⚑

Title: Securing the SSL channel against man-in-the-middle attacks: Future technologies – HTTP Strict Transport Security and Pinning of Certs Abstract

Tagged with: against • attacks • channel • gondrom • middle • securing • tobias

NoSQL, No Security? – Will Urbanski

November 27th, 2012 📆 | 6419 Views ⚑

Title: NoSQL, No Security? Abstract Serving as a scalable alternative to traditional relational databases (RDBs), NoSQL databases have exploded in

Tagged with: nosql • security • urbanski

Reports give details of cyberattack on Saudi Aramco

November 27th, 2012 📆 | 8461 Views ⚑

US intelligence officials say Iran was likely responsible for the Aug. 15 cyberattack on Saudi Aramco, the world’s largest oil

Tagged with: aramco • cyberattack • details • reports • saudi

The Application Security Ponzi Scheme: Stop Paying For Security Failure – Jarret Raim and Matt Tesauro

November 26th, 2012 📆 | 2188 Views ⚑

Title: The Application Security Ponzi Scheme: Stop Paying For Security Failure Abstract Consider the major classes of threats that have

Tagged with: application • failure • paying • ponzi • scheme • security

WordPress 3.4 Hack : Sql Injection via FireStorm Real Estate Plugin 2.06.01

November 26th, 2012 📆 | 3659 Views ⚑

This is video on how a vulnerability in a plugin can compromise a CMS (wordpress based website) Link to vulnerable

Tagged with: estate • firestorm • injection • plugin • wordpress

zAnti Presentation – Mobile Pentesting!

November 26th, 2012 📆 | 5051 Views ⚑

This is a presentation on the mobile application zAnti developed by Zimperium. http://www.zimperium.com/products.php 2012-11-26 08:37:16 source

Tagged with: mobile • pentesting • presentation • zanti

Incident Response: Security After Compromise – Richard Bejtlich

November 26th, 2012 📆 | 3434 Views ⚑

Title: Incident Response: Security After Compromise Abstract Too often security and IT professionals believe that once a system is compromised,

Tagged with: after • bejtlich • compromise • incident • response • richard • security

Web App Crypto – A Study in Failure – Travis H.

November 26th, 2012 📆 | 7171 Views ⚑

Title: Web App Crypto – A Study In Failure Abstract Seldom in cryptography do we have any unconditional proofs of

Tagged with: crypto • failure • study • travis

Rebooting (Secure) Software Development with Continuous Deployment – Nick Galbreath

November 25th, 2012 📆 | 3025 Views ⚑

Title: Rebooting (Secure) Software Development with Continuous Deployment Abstract If we are ever going to get ahead of the whack-a-mole

Tagged with: continuous • deployment • development • galbreath • rebooting • secure • software

Web Framework Vulnerabilties – Abraham Kang

November 25th, 2012 📆 | 4706 Views ⚑

Title: Web Framework Vulnerabilities Abstract This talk will give participants an opportunity to practically code review Web Application Framework based

Tagged with: abraham • framework • vulnerabilties

XSS & CSRF with HTML5 – Attack, Exploit and Defense – Shreeraj Shah

November 25th, 2012 📆 | 7086 Views ⚑

Title: XSS & CSRF with HTML5 – Attack, Exploit and Defense Abstract HTML5 has empowered browser with a number of

Tagged with: attack • defense • exploit • html5 • shreeraj

Spin the Bottle: Coupling Technology and SE For One Awesome Hack – Dave Kennedy

November 25th, 2012 📆 | 3140 Views ⚑

Title: Spin the Bottle: Coupling Technology and SE For One Awesome Hack Abstract Social-Engineering is nothing new. From the dawn

Tagged with: awesome • bottle • coupling • kennedy • technology

I>S+D! – Interactive Application Security Testing(IAST), Beyond SAST/DAST – Ofer Maor

November 24th, 2012 📆 | 6210 Views ⚑

Title: I>S+D! – Interactive Application Security Testing(IAST), Beyond SAST/DAST Abstract Until recently, SAST/DAST dominated the application security testing market, each

Tagged with: application • beyond • interactive • security • testing