The newest Presentations / Talks resources are on the Presentations / Talks page. For a reading order instead of a date order, see the Presentations / Talks learning path.
| Date Added | Link | Excerpt |
|---|---|---|
| 2025-03-14 2025 | Stop Confusing Privacy & Anonymity (and Security) beginner | Stop Confusing Privacy & Anonymity (and Security) |
| 2025-01-23 2025 | Global AppSec San Francisco 2024 news | OWASP Global AppSec US Conference alongside 1200+ cybersecurity experts from September 23-27 at the Hyatt Regency San Francisco in San Francisco, CA. https:/... |
| 2025-01-04 2025 | [SEI' 24] Modern Systems Programming: Rust and Zig - Aleksey Kladov intermediate | Enjoy the videos and music you love, upload original content, and share it all with friends, family, and the world on YouTube. |
| 2024-11-25 2024 | Vxcon2024 workshop news Mobile | Vxcon2024 workshop |
| 2024-11-13 2024 | [HackerNotes Ep.95 & Ep.96] Cookies, Caching & Attacking Chrome Extensions with MatanBer intermediate 21 min read XSS | Library detailing attacks against Chrome Extensions, covering their components like content scripts, service workers, extension pages, and manifest files. It explains how to gain access to extension source code, identifies attack vectors for content scripts including DOM injection and clickjacking, and discusses attacking extension pages and service workers via misconfigurations in `web_accessible_resources` and `externally_connectable`. The entry also touches on debugging techniques and includes references to Heroctf-v6 writeups concerning cache API and service worker research. |
| 2024-08-03 2024 | Testing Handbook - Burp beginner Burp | Watch the recording Testing Handbook: Burp Suite Professional https://appsec.guide → docs.google.com |
| 2023-09-22 2023 | IDOR - how to predict an identifier? Bug bounty case study intermediate Bug Bounty IDOR | IDOR - how to predict an identifier? Bug bounty case study https://www.youtube.com/watch?v=wx5TwS0Dres |
| 2023-09-22 2023 | How to turn SQL injection into an RCE or a file read? Case study of 128 bug bounty reports intermediate Bug Bounty RCE SQLi | How to turn SQL injection into an RCE or a file read? Case study of 128 bug bounty reports https://www.youtube.com/watch?v=ClnVdYf4PK0 |
| 2023-09-02 2023 | Irit Katriel- opening keynote: Error Handling: From Charles Babbage to Python 3.11 beginner | Irit Katriel- opening keynote: Error Handling: From Charles Babbage to Python 3.11 https://www.youtube.com/watch?v=rKBKHVvXuUI |
| 2023-05-29 2023 | Slides: GraphQL Hacking intermediate GraphQL | Slides: GraphQL Hacking https://ift.tt/oLqt1GD |
| 2022-02-27 2022 | Favorite tweet by @ZAProxyCon beginner Bug Bounty | Favorite tweet: You're invited to #ZAPCon 2022! ⚡️ Whether you are just getting started, or have a decade of experience with ZAP, ZAPCon will level-up your AppSec skills. 100% Virtual. 100% Free! 🎟️ ... |
| 2022-01-13 2022 | Roadmap for learning smart contract security beginner | Roadmap for learning smart contract security |
| 2022-01-11 2022 | Open-Source Intelligence (OSINT) in 5 Hours - Full Course - Learn OSINT! beginner OSINT | Open-Source Intelligence (OSINT) in 5 Hours - Full Course - Learn OSINT! |
| 2021-11-24 2021 | Fuzzing with Scapy: Introduction to Network Protocol Fuzzing beginner Fuzzing | Fuzzing with Scapy: Introduction to Network Protocol Fuzzing |
| 2021-09-07 2021 | Dan Miessler Talks About Recon/Automation Seclists Certifications Mental Health & More! news Recon | Dan Miessler Talks About Recon/Automation Seclists Certifications Mental Health & More! |
| 2021-08-21 2021 | The Scariest Things We Saw at Black Hat 2021 news Bug Bounty | The Scariest Things We Saw at Black Hat 2021 |
| 2021-08-14 2021 | DEFCONConference news | DEFCONConference |
| 2021-05-20 2021 | CircleCityCon 8.0: Happy Little Conference news | CircleCityCon 8.0, themed "Happy Little Conference," was a cybersecurity event. |
| 2020-01-31 2020 | OWASP Videos beginner | The OWASP Foundation hosts videos on its website to educate about software security. OWASP is a nonprofit organization dedicated to enhancing software security. |
| 2020-01-31 2020 | Purple is the new black: Modern Approaches to Application Security beginner | The content discusses modern approaches to application security, highlighting the concept that "purple is the new black." This phrase implies a shift towards a more comprehensive and integrated approach to security that combines traditional blue team (defenders) and red team (attackers) strategies. By adopting a "purple team" mindset, organizations can enhance their security posture by fostering collaboration between defensive and offensive security teams to better protect against cyber threats. → slideshare.net |