Activity Spotlight

Intro to Hacking Web Applications

The vast majority of cyber attacks are relatively easy to defend – yet most web applications remain vulnerable. In fact, many developers aren’t even aware of how simple these attacks are to execute. Spoiler alert: it’s really, really easy. During this half-day workshop we’ll learn a variety of concepts and tools enabling us to hack our way into vulnerable web applications built with modern JavaScript frameworks like React, Angular and more. We’ll cover a variety of approaches for building threat models and exploiting vulnerabilities: everything from XSS to SQL injections to brute-force attacks and more! Be prepared to learn, laugh and cry as we explore security flaws common to both legacy and modern web applications. You'll walk away from this workshop with: * a deep understanding of application architectures and threat models, * a detailed understanding of OWASP best practices, and * specific countermeasures to keep your web applications secure Let's build a safer, more secure web together! NOTE: the exercises in this workshop are part of HackTheBox, and therefore require a VIP subscription to that service (~$15 USD/month) which is not included in the price of THAT. You can sign up the day of the workshop and immediately cancel afterwards... but please be aware of that extra fee.