Monthly Archives: November 2012

Passwords and Credit Card Numbers Hacked! SQL Injection Explained YouTube

November 30th, 2012 📆 | 5864 Views ⚑

video, sharing, camera phone, video phone, free, upload 2012-11-30 21:54:36 source

Tagged with: credit • explained • hacked • injection • numbers • passwords • youtube

Vulnerability Management – Making the Process Work

November 30th, 2012 📆 | 2502 Views ⚑

What’s your process for managing security vulnerabilities? A 100+ page report from your Vulnerability Scanner can be paralyzing for Operations.

Tagged with: making • management • process • vulnerability

Man…or Astro Man? – Defcon 5

November 30th, 2012 📆 | 7714 Views ⚑

Analog Series Vol.1, 7″, 2012 2012-11-30 10:34:49 source

Tagged with: astro • defcon

#HITB2012KUL D2T1 – Shreeraj Shah – XSS & CSRF Strike Back — Powered by HTML5

November 30th, 2012 📆 | 2219 Views ⚑

PRESENTATION MATERIALS: http://conference.hitb.org/hitbsecconf2012kul/materials/ PRESENTATION ABSTRACT: HTML5 has empowered browser with a number of new features and functionalities. Browsers with this

Tagged with: hitb2012kul • html5 • powered • shreeraj • strike

Comedy Hack Day NYC

November 29th, 2012 📆 | 3306 Views ⚑

Watch the demos from the first ever Comedy Hack Day! 21:00 the stream actually starts 1. Lobbyists from Last Night

Tagged with: Comedy

Xenotix XSS Exploit Framework v.2 Released

November 29th, 2012 📆 | 6697 Views ⚑

Xenotix XSS Exploit Framework is a penetration testing tool to detect and exploit XSS vulnerabilities in Web Applications. This tool

Tagged with: exploit • framework • released • xenotix

Computer and Cellular Forensics Investigations

November 28th, 2012 📆 | 2777 Views ⚑

Computer Evidence Recovery Expert Kevin Ripa talks about hiring a computer or cellular forensics specialist, how it can improve your

Tagged with: cellular • computer • forensics • investigations

WTF – WAF Testing Framework – Yaniv Azaria and Amichai Shulman

November 28th, 2012 📆 | 2416 Views ⚑

Title: WTF – WAF Testing Framework Abstract We will be presenting a new approach to evaluating web application firewall capabilities

Tagged with: amichai • appsec • appsecusa • azaria • framework • owasp • shulman • testing • WAF • WTF • yaniv

xss

November 28th, 2012 📆 | 8196 Views ⚑

Likes: 0 Viewed: source

The 7 Qualities of Highly Secure Software, Mano Paul

November 28th, 2012 📆 | 2061 Views ⚑

Title: The 7 Qualities of Highly Secure Software Abstract The applications on the web, mobile, and the cloud, all have

Tagged with: highly • qualities • secure • software

Xenotix XSS Exploit Framework 2012 v2

November 28th, 2012 📆 | 6124 Views ⚑

Xenotix XSS Exploit Framework is a penetration testing tool to detect and exploit XSS vulnerabilities in Web Applications. This tool

Tagged with: exploit • framework • xenotix

Let's Play DEFCON [Rob and Steve Play That Game]

November 27th, 2012 📆 | 2390 Views ⚑

Steve and I finally go to war, nuclear war. We sit down and go head to head in DEFCON, the

Tagged with: defcon • steve

Securing the SSL channel against man-in-the-middle attacks – Tobias Gondrom

November 27th, 2012 📆 | 4384 Views ⚑

Title: Securing the SSL channel against man-in-the-middle attacks: Future technologies – HTTP Strict Transport Security and Pinning of Certs Abstract

Tagged with: against • attacks • channel • gondrom • middle • securing • tobias

NoSQL, No Security? – Will Urbanski

November 27th, 2012 📆 | 7739 Views ⚑

Title: NoSQL, No Security? Abstract Serving as a scalable alternative to traditional relational databases (RDBs), NoSQL databases have exploded in

Tagged with: nosql • security • urbanski

The Magic of Symbiotic Security: Creating an Ecosystem of Security Systems – Dan Cornell and Josh Sokol

November 27th, 2012 📆 | 7107 Views ⚑

Title: The Magic of Symbiotic Security: Creating an Ecosystem of Security Systems Abstract Throw out everything that you know about

Tagged with: appsec • appsecusa • cornell • creating • Dan • ecosystem • Josh • magic • owasp • security • sokol • symbiotic • systems

Reports give details of cyberattack on Saudi Aramco

November 27th, 2012 📆 | 7010 Views ⚑

US intelligence officials say Iran was likely responsible for the Aug. 15 cyberattack on Saudi Aramco, the world’s largest oil

Tagged with: aramco • cyberattack • details • reports • saudi

The Application Security Ponzi Scheme: Stop Paying For Security Failure – Jarret Raim and Matt Tesauro

November 26th, 2012 📆 | 2841 Views ⚑

Title: The Application Security Ponzi Scheme: Stop Paying For Security Failure Abstract Consider the major classes of threats that have

Tagged with: application • failure • paying • ponzi • scheme • security

WordPress 3.4 Hack : Sql Injection via FireStorm Real Estate Plugin 2.06.01

November 26th, 2012 📆 | 4211 Views ⚑

This is video on how a vulnerability in a plugin can compromise a CMS (wordpress based website) Link to vulnerable

Tagged with: estate • firestorm • injection • plugin • wordpress

zAnti Presentation – Mobile Pentesting!

November 26th, 2012 📆 | 2509 Views ⚑

This is a presentation on the mobile application zAnti developed by Zimperium. http://www.zimperium.com/products.php 2012-11-26 08:37:16 source

Tagged with: mobile • pentesting • presentation • zanti

Incident Response: Security After Compromise – Richard Bejtlich

November 26th, 2012 📆 | 3578 Views ⚑

Title: Incident Response: Security After Compromise Abstract Too often security and IT professionals believe that once a system is compromised,

Tagged with: after • bejtlich • compromise • incident • response • richard • security

Web App Crypto – A Study in Failure – Travis H.

November 26th, 2012 📆 | 5529 Views ⚑

Title: Web App Crypto – A Study In Failure Abstract Seldom in cryptography do we have any unconditional proofs of

Tagged with: crypto • failure • study • travis

Rebooting (Secure) Software Development with Continuous Deployment – Nick Galbreath

November 25th, 2012 📆 | 8242 Views ⚑

Title: Rebooting (Secure) Software Development with Continuous Deployment Abstract If we are ever going to get ahead of the whack-a-mole

Tagged with: continuous • deployment • development • galbreath • rebooting • secure • software

Put Your Robots to Work: Security Automation at Twitter – Justin Collins, Neil Matatall, Alex Smolen

November 25th, 2012 📆 | 3479 Views ⚑

Title: Put Your Robots to Work: Security Automation at Twitter Abstract With daily code releases and a growing infrastructure, manually

Tagged with: Alex • appsec • appsecusa • automation • collins • justin • matatall • Neil • owasp • put • robots • security • Smolen • twitter • work

Gauntlt: Rugged by Example – Jeremiah Shirk, Mani Tadayon, James Wickett

November 25th, 2012 📆 | 4783 Views ⚑

Title: Gauntlt: Rugged by Example Abstract “Be Mean to Your Code” is the concept behind the ruggedization framework called Gauntlt

Tagged with: appsec • appsecusa • example • gauntlt • james • jeremiah • Mani • owasp • rugged • shirk • tadayon • Wickett