OWASP Kraków

Event:

OWASP Kraków

Event type:

Meetup

Category:

Topic:

security

Date:

04.04.2018 (wednesday)

Time:

18:00

Language:

Polish

Price:

Free

City:

Kraków

Place:

Klub RE

Address:

ul. Świętego Krzyża 4

Zgłoś zmiany w wydarzeniu

Speakers:

Marcin Szydłowski

Mateusz Niezabitowski

Agenda:

Marcin Szydłowski - Insecure HTTP Headers

Description:

Presentation will describe not very well-known group of web application vulnerabilities related to insecure handling of data passed in HTTP headers. Lecture will cover practical examples, most common cases of vulnerable applications, as well as steps which needs to be taken to eliminate these issues. Examples described during the presentation will be related to improper handling of X-Forwarded-For and Host headers identified during penetration testing activities and bug bounty programmes.

Mateusz Niezabitowski - Java Deserialization

Description: Object deserialization vulnerabilities in Java are not exactly new, but only recently they got some attention. They are very dangerous, and they are format agnostic - which I will demonstrate in this demo-heavy talk.

Ask Me Anything with Allegro security team.

You can ask them anything about IT security (but they can refuse to answer ;)

Description:

Wznawiamy spotkania OWASP w Krakowie! Tym razem przygotowaliśmy coś specjalnego. Oprócz dwóch interesujacych prelekcji ("Insecure HTTP Headers" i "Java Deserialization"), będzie również dyskusja z zespołem IT security Allegro w formacje "ask me anything". Prosimy o potwierdzenie uczestnictwa via Meetup i podzielenie się tą wiadomością z innymi.

Participants (1):