Class Central is learner-supported. When you buy through links on our site, we may earn an affiliate commission.

YouTube

Attacking Modern Web Technologies

OWASP Foundation via YouTube

Overview

Save Big on Coursera Plus. 7,000+ courses at $160 off. Limited Time Only!
Dive into a comprehensive exploration of modern web technology vulnerabilities with top-ranked white-hat hacker Frans Rosén in this 43-minute conference talk from OWASP AppSec EU 2018. Discover methodologies for accessing private Slack tokens through postMessage and WebSocket-reconnect techniques, and learn how misconfigured AWS and Google Cloud settings can lead to full asset control by attackers. Gain insights into new hacks, bug bounty experiences, and eye-opening revelations about the true security of seemingly safe protocols and policies. Topics covered include AppCache, Dropbox upload policies, postmessage vulnerabilities, document service exploits, clientside race conditions, jQuery security issues, and more. Conclude with a Q&A session to deepen your understanding of cutting-edge web security challenges.

Syllabus

Introduction
Attacking Modern Web Technologies
About Frans Rosen
Outline of the talk
AppCache
Dropbox
Upload Policies
Custom Policies
Postmessage
Document Service
Clientside Race Conditions
Example
Speed Bumps
jQuery
What could I add to it
One more thing
Questions

Taught by

OWASP Foundation

Reviews

Start your review of Attacking Modern Web Technologies

Never Stop Learning.

Get personalized course recommendations, track subjects and courses with reminders, and more.

Someone learning on their laptop while sitting on the floor.