I hack your production live with 15 security flaws
summary
A live demo walks through 15 real security vulnerabilities found in an existing web application, showing how they can be discovered and exploited. It focuses on developers’ responsibility for application security, explaining the developer’s role and concrete best practices to apply to prevent these flaws.
AI-written summary · about
chapters (18)
- 0:00Web security introduction
- 2:10Application flaws and OWASP Top Ten
- 6:45SQL enumeration and errors
- 10:57Cross-Site Request Forgery (CSRF)
- 13:30Insecure Direct Object Reference (IDOR)
- 16:19Client vs server validation
- 17:25Unsecured cookies and manipulation
- 19:34Mass Assignment and business objects
- 21:42Cross-Site Scripting (XSS)
- 25:08Forgotten passwords and security
- 27:02Unsecure random generators
- 29:59Vulnerable dependencies
- 31:02JWT and signature algorithms
- 33:30Workflow controls and security
- 35:44Exposed admin pages
- 38:22Server-Side Request Forgery (SSRF)
- 40:29Security logs and events
- 41:34Security culture and inclusivity
related talks
45mI abuse your production live with 15 security flaws
40mI Break Your Prod Live with 15 Security Flaws
52mHow to Get Properly Hacked
45mOverview of Interesting Vulnerabilities in Web Applications - Live Demos
41mLive Hacking: Breaking into Your Web App
55mBreaking and Fixing Web Application Security
46mLive hacking: Breaking into your Java web app
38mFinding Security Issues in Open Source