🧪 Experimental Feature

Focus Areas are an experimental feature that groups related content by tags. This page and its functionality may change as we refine the categorization system.

Application Security

Security practices and techniques for securing software applications

244

Total Entries

221

Contributors

183

Unique Tags

Related Tags

All Entries (244 total, sorted by date)

Date	Type	Conference	Title	Speaker(s)	Tags
2025-08-07	Tool demo	Blackhat	Frogy 2.0 - Automated external attack surface analysis toolkit	Chintan Gurjar	attack-surface vulnerability-assessment asset-management+2
2025-08-07	Tool demo	Blackhat	Q-TIP (QR Code Threat Inspection Platform)	Rushikesh D Nandedkar	incident-response web-security vulnerability-management+2
2025-08-07	Tool demo	Blackhat	Pentest Copilot: Cursor for Pentesters	Dhruva Goyal, Sitaraman S	pentesting application-pentesting vulnerability-assessment+2
2025-08-07	Tool demo	Blackhat	AzDevRecon - Azure DevOps Enumeration Tool	Raunak Parmar	azure devsecops iam+1
2025-08-06	Tool demo	Blackhat	Damn Vulnerable Browser Extension (DVBE): Unmask the risks of your Browser Supplements	Abhinav Khanna, Krishna Chaganti	web-security secure-coding pentesting+3
2025-08-06	Tool demo	Blackhat	Open-Source API Firewall by Wallarm - Advanced Protection for REST and GraphQL APIs	Satinder Khasriya	api-security web-security owasp+1
2025-08-06	Tool demo	Blackhat	SmuggleShield - Protection Against HTML Smuggling	Dhiraj Mishra	web-security malware-detection browser-security+2
2025-08-06	Tool demo	Blackhat	ParseAndC 4.0 - The Final Cut	Parbati Kumar Manna	reverse-engineering binary-analysis code-analysis+4
2025-08-06	Tool demo	Blackhat	Varunastra: Securing the Depths of Docker V2	Devang Solanki	container-security docker static-analysis+4
2025-08-06	Tool demo	Blackhat	vet: Proactive Guardrails against Malicious OSS using Code Analysis	Abhisek Datta	static-analysis software-security devsecops+3
2025-08-06	Tool demo	Blackhat	ARC – Artifact Reuse Comparator	Rushikesh D Nandedkar	static-analysis reverse-engineering binary-analysis+3
2025-08-06	Tool demo	Blackhat	MORF – Mobile Reconnaissance Framework	Amrudesh Balakrishnan, Abhishek Jm	mobile-security app-security mobile-pentesting+4
2025-08-06	Tool demo	Blackhat	Realtic	Sohan Simha Prabhakar, Samarth Bhaskar Bhat	pentesting vulnerability-assessment static-analysis+3
2025-08-06	Tool demo	Blackhat	ShadowSeek: Combining Ghidra and Large Language Models for Advanced Binary Analysis	Mohammed Tanveer	reverse-engineering binary-analysis static-analysis+3
2025-08-06	Tool demo	Blackhat	ThreatShield - The Intelligent way of Threat Modelling	Ashwin Shenoi, Satyam Nagpal, Sayooj B Kumar	threat_modeling security-architecture devsecops+1
2025-08-06	Talk	Blackhat	When ‘Changed Files’ Changed Everything: Uncovering and Responding to the tj-actions Supply Chain Breach	Varun Sharma, Ashish Kurmi	ci-cd incident-response devsecops+3
2025-08-06	Talk	Blackhat	Adversarial Fuzzer for Teleoperation Commands: Evaluating Autonomous Vehicle Resilience	Shanit Gupta	automotive-cybersecurity vulnerability-management security-testing+1
2025-04-30	Talk	Rsac	Got Supply Pain? A Real-World Approach to Supply Chain SDL	Mohit Arora	secure-development devsecops vulnerability-management+5
2025-04-29	Talk	Rsac	RAG-NAROK: What Poorly-Built RAGs Can Do to Data Security	Akash Mukherjee	secure-development devsecops data-protection+2
2025-04-04	Talk	Blackhat	Standing on the Shoulders of Giants: De-Obfuscating WebAssembly Using LLVM	Vikas Gupta	reverse-engineering code-analysis software-security
2025-04-03	Talk	Blackhat	ObfusQate: Where Quantum Magic Meets Code Security – Say Goodbye to Easy Cracking!	Vivek Balachandran	secure-coding
2025-03-02	Talk	Nullcon	Building Glitch-Resistant Firmware: Practical Software Countermeasures for Hardware glitch attacks	Shyam Kumar Arshid, Chinmay Krishna	embedded-security firmware-analysis hardware-security+3
2025-03-02	Talk	Nullcon	Hidden in Plain Sight: Large-Scale Exposure of Orphaned Commits on Major Git Platforms	Kumar Ashwin	vulnerability-management secure-coding devsecops+1
2025-03-01	Talk	Nullcon	The Future is Trustless: How zkVMS and zkTLS Transform Bug Bounties	Anto Joseph	vulnerability-management bug-bounty secure-development
2024-11-28	Talk	Blackhat	A Tale of Pwning 500+ Vehicle Anti-theft Devices	Umair Nehri	mobile-security vulnerability-assessment iot-pentesting+1
2024-11-27	Tool demo	Blackhat	Varunastra: Securing the Depths of Docker	Kunal Aggarwal	container-security docker pentesting+3
2024-11-27	Talk	Blackhat	The Future of Cybersecurity: Addressing New Threats with Groundbreaking Strategies	Mahesh Babu Kanigiri	risk-management vulnerability-management security-architecture+2
2024-11-26	Talk	Blackhat	Cyber Security & Resiliency: a perspective with emerging technologies and Innovation	Atul Kumar	cybersecurity-strategies risk-management cyber-resilience+2
2024-11-26	Talk	Blackhat	The Double Edge Sword - Cybersecurity & AI	Karmendra Kohli	security-architecture risk-management devsecops+1
2024-11-15	Talk	C0c0n	CISO’s take on BYOAI	Venugopal Parameswara	risk-management security-governance compliance+4
2024-10-23	Tool demo	Blackhat	Cyber Arsenal47	Simardeep Singh	automated-scanning vulnerability-assessment pentesting+3
2024-08-30	Talk	Hitb Sec Conf	Exploiting the In-Vehicle Browser: A Novel Attack Vector in Autonomous Vehicles	Ravi Rajput	web-security pentesting exploitation+4
2024-08-29	Tool demo	Hitb Sec Conf	Mantis	Bharath Kumar, Akshay Jain	vulnerability-management asset-inventory dast+2
2024-08-10	Talk	Defcon	Sneaky Extensions: The MV3 Escape Artists	Vivek Ramachandran, Shourya Pratap Singh	web-security pentesting vulnerability-management
2024-08-08	Tool demo	Blackhat	ICSGoat: A Damn Vulnerable ICS Infrastructure	Shantanu Kale, Divya Nain	ics-security scada plc+3
2024-06-27	Talk	Troopers	The Hidden Dangers Lurking in Your Pocket – Pwning Apple Wallet ecosystem and its apps	Priyank Nigam	mobile-security pentesting api-security+2
2024-05-07	Talk	Rsac	A Proven Approach on Automated Security Architectural Pattern Validation	Sunil Arora	security-architecture devsecops vulnerability-management+2
2024-04-18	Tool demo	Blackhat	Mantis - Asset Discovery at Scale	Ankur Bhargava, Prateek Thakare, Saddam Hussain	asset-inventory vulnerability-management security-architecture+3
2024-03-11	Talk	Nullcon	Achilles Heel In Secure Boot: Breaking RSA Authentication And Bitstream Recovery From Zynq-7000 SoC	Arpan Jati	vulnerability-assessment
2023-12-06	Tool demo	Blackhat	Honeyscanner: a vulnerability analyzer for Honeypots	Shreyas Srinivasa	vulnerability-assessment
2023-09-28	Talk	Hackinparis	How to have visibility and security OF CICD ecosystem	Pramod Rana	cicd-security devsecops vulnerability-management+6
2023-09-23	Talk	Nullcon	Secure Coding: Fix From The Root	Saddam Hussain, Gopika Subramanian	secure-coding
2023-08-12	Tool demo	Defcon	Open Source API Security for devsecops	Ankush Jain, Ankita Gupta 1	api-security devsecops ci-cd+3
2023-08-12	Talk	Defcon	Getting More Bang for your Buck:Appsec on a Limited Budget	Vandana Verma Sehgal, Viraj Gandhi	secure-development devsecops risk-management+3
2023-08-11	Talk	Defcon	Generative Adversarial Network (GAN) based autonomous penetration testing for Web Applications	Ankur Chowdhary	web-security xss application-pentesting+3
2023-08-11	Tool demo	Defcon	vAPI : Vulnerable Adversely Programmed Interface	Tushar Kulkarni	api-security owasp authorization+1
2023-08-09	Tool demo	Blackhat	CASPR - Code Trust Auditing Framework	Ajit Hatti	secure-coding
2023-08-07	Talk	C0c0n	Smart Contract Phishing : Attack & Defense	Tejaswa Rastogi	smart-contracts blockchain-security phishing+3
2023-08-07	Talk	C0c0n	Start Left SDLC Security with Open-Source DevSecOps Tooling	Aswin Raj, Shruti M G	devsecops secure-development static-analysis+3
2023-08-07	Talk	C0c0n	Uncovering the Hidden Dangers Lurking as Android Apps using ML Algos	Nikhil Prabhakar	android-security mobile-security reverse-engineering+1
2023-08-07	Talk	C0c0n	Serverless Siege: AWS Lambda Pentesting	Anjali Singh Shukla, Divyanshu Shukla	aws serverless cloud-pentesting+2
2023-08-07	Talk	C0c0n	Shifting left blockchain development for safer DApps	Dhanith Krishna	blockchain-security smart-contracts secure-development+3
2023-08-07	Talk	C0c0n	Homomorphic Encryption - Myth to Reality	Anish Koshy	encryption security-architecture privacy+2
2023-08-06	Talk	C0c0n	Mitigating SSRF at scale the right way with IMDSv2!	Ayush Priya	web-security api-security aws+3
2023-08-06	Talk	C0c0n	The new way to be secure	Sakshi Bhutani	secure-development devsecops software-security+3
2023-08-06	Talk	C0c0n	Surviving In Dependency Hell	Kumar Ashwin	secure-development devsecops vulnerability-management+1
2023-08-06	Talk	C0c0n	Influence of Artificial Intelligence in GRC Space	Mahesh Kalyanaraman	governance risk-management compliance+3
2023-08-06	Talk	C0c0n	Taking a Closer Look at CI/CD Pipeline Logs: Extracting Security-Related Information with Build Inspector	Anshu Kumar, Pavan Sorab	devsecops ci-cd cicd-pipeline+3
2023-05-11	Tool demo	Blackhat	CASPR - Code Trust Auditing Framework	Atharva Chincholkar, Srishti Chaubey	secure-coding
2023-04-26	Talk	Rsac	Designing Product Security for a Brighter Smile and a Healthier Tomorrow	Lokesh Pidawekar	secure-development devsecops software-security+2
2023-04-26	Talk	Rsac	Is Increasing Security Maturity And Decreasing Operational Load Possible?	Rohit Dhamankar	Automation risk-management security-architecture+2
2022-09-24	Talk	C0c0n	Raining CVEs on Wordpress plugins with Semgrep	Shreya Pohekar, Syed Sheeraz Ali	web-security static-analysis sast+2
2022-09-24	Talk	C0c0n	Web3 Security - Security in MetaVerse, and the new world of web3	Rohit Srivastwa	blockchain-security web3 decentralized-systems+3
2022-09-24	Talk	C0c0n	Building Smart, Resilient and Sustainable Cyber Eco System	Navin Kumar Singh	risk-management cybersecurity-strategies security-architecture+4
2022-09-24	Talk	C0c0n	In production with GRC for cloud	Mahesh Kalyanaraman	cloud-compliance governance risk-management+2
2022-09-23	Talk	C0c0n	Securing your APIs for a cloud native future	Navendu Pottekkat	api-security secure-development devsecops
2022-09-23	Talk	C0c0n	Threats Landscape and Intelligence of API & Shield to protect	Navaneethan M	api-security threat-landscape threat-hunting+1
2022-09-23	Talk	C0c0n	Hacking SmartContracts	Anto Joseph	blockchain-security smart-contracts vulnerability-management+2
2022-09-23	Talk	C0c0n	Pwning Android Apps at Scale	Sparsh Kulshrestha, Shashank Barthwal	android-security mobile-security mobile-pentesting+3
2022-09-23	Talk	C0c0n	Building a Safer and Innovative Digital Ecosystem	Vijay Pamarathi	secure-development devsecops software-security+2
2022-09-23	Talk	C0c0n	Collaborative efforts for safe digital banking	Biju K	secure-development risk-management security-architecture
2022-09-23	Talk	C0c0n	Hyperledger Fabric & Ethereum Apps: Security Deep Dive	Alex Devassy, Dhanith Krishna	blockchain-security smart-contracts solidity+3
2022-09-23	Talk	C0c0n	Bridging the gap between Security and Operations	Sujay Rajashekar Gundagatti	devsecops security-architecture threat-detection+3
2022-09-23	Talk	C0c0n	Maximizing ROI on cyber security investments: Do you think Adversary Simulation OR Purple teaming holds the key?	Abhijith B R	risk-management security-architecture devsecops
2022-09-08	Talk	Nullcon	Pushing Security Left By Mutating Byte Code	Gaurav Gogia	secure-coding
2022-09-08	Talk	Nullcon	vPrioritizer: Art of Risk Prioritization	Pramod Rana	vulnerability-assessment
2022-08-12	Talk	Defcon	Stop worrying about Nation-States and Zero-Days; let’s fix things that have been known for years	Vivek Ponnada	secure-coding vulnerability-management devsecops+1
2022-08-10	Tool demo	Blackhat	CASPR - Code Trust Audit Framework	Ajit Hatti	secure-coding
2021-11-13	Talk	C0c0n	Exploiting 2A(Authentication and Authorization) Vulnerabilities of Web Application	Gayatri Nayak	web-security authentication authorization+2
2021-11-13	Talk	C0c0n	Server-side javascript Injection	Kavisha Sheth	web-security secure-coding web-pentesting
2021-11-13	Talk	C0c0n	New way of looking at the hidden mysteries in the code	Vandana Verma Sehgal	code-review static-analysis reverse-engineering+2
2021-11-13	Talk	C0c0n	Connecting the dots between customers and security teams	Shruthi Kamath	incident-response security-awareness devsecops+1
2021-11-13	Talk	C0c0n	Cybersecurity in the era of Resilience - A walk through people, process and technology	Babitha B P	risk-management cyber-resilience security-architecture+3
2021-11-12	Talk	C0c0n	Dissecting Malicious Software and Analysis	Shrutirupa Banerjiee	malware reverse-engineering dynamic-analysis+1
2021-11-04	Talk	Ekoparty	DIAL: Did I just alert Lambda? A centralized security misconfiguration detection system	Saransh Rana, Divyanshu Mehta, Harsh Varagiya	aws security-monitoring iam+2
2021-10-15	Talk	Rootcon	The Curious case of knowing the unknown	Vandana Verma Sehgal	vulnerability-management secure-coding devsecops+1
2021-08-08	Talk	Defcon	AppSec 101: A Journey from Engineer to Hacker	Arjun Gopalakrishna	secure-coding pentesting ethical-hacking+2
2021-08-08	Talk	Defcon	Top 20 Secure PLC Coding Practices	Vivek Ponnada	industrial-control-systems-security secure-coding vulnerability-management+3
2021-08-06	Talk	Defcon	Adversary village Kick-off	Abhijith B R	red-teaming ethical-hacking vulnerability-assessment+2
2021-08-05	Talk	Defcon	The Bug Hunter’s Recon Methodology	Tushar Verma	pentesting vulnerability-assessment application-pentesting+1
2021-08-04	Tool demo	Blackhat	Counterfit: Attacking Machine Learning in Blackbox Settings	Raja Sekhar Rao Dheekonda	vulnerability-assessment
2021-08-04	Tool demo	Blackhat	Joern: An Interactive Shell for Code Analysis	Suchakra Sharma	vulnerability-assessment
2021-05-06	Tool demo	Blackhat	Demystifying the State of Kubernetes Cluster Security - The Cloud Native Way	Vasant Kumar, Rupali Dash	kubernetes cloud audit+4
2021-05-06	Tool demo	Blackhat	FalconEye: Windows Process Injection Techniques - Catch Them All	Rajiv Kulkarni, Sushant Paithane	windows process-injection blueteam+2
2020-11-21	Talk	App Sec Indonesia	Learn how to find and exploit race conditions in web apps with OWASP TimeGap Theory	Abhi M Balakrishnan	web-security owasp application-pentesting+2
2020-11-21	Talk	App Sec Indonesia	The caveats of the unseen: Crouching exposure, Hidden Misconfiguration	Ashwin Vamshi	vulnerability-management security-architecture devsecops+2
2020-10-02	Tool demo	Blackhat	OWASP Nettacker	Sri Harsha Gajavalli	pentesting vulnerability-assessment network-pentesting+3
2020-10-01	Tool demo	Blackhat	OWASP Python Honeypot	Sri Harsha Gajavalli	web-security owasp pentesting+1
2020-09-19	Talk	C0c0n	Automate your Recon with ReconNote	Prasoon Gupta	pentesting vulnerability-assessment Automation+1
2020-09-18	Talk	C0c0n	Web Application hacking with WebZGround	Parveen Yadav, Narendra Kumar	web-security web-pentesting pentesting+3
2020-09-18	Talk	C0c0n	Demystifying Zero Trust - A Real world	Sandeep Variyam	zero-trust security-architecture security-governance+1
2020-08-09	Talk	Defcon	Running an appsec program with open source projects	Vandana Verma Sehgal	owasp secure-development devsecops+3
2020-04-25	Talk	Hitb Sec Conf	THE STATE OF ICS SECURITY: THEN AND NOW	Praveen Soni, Shivbihari Pandey, Ashish Kumar Gahlot	vulnerability-assessment pentest infrastructure+1
2020-03-06	Tool demo	Nullcon	VyAPI	Riddhi Shree	secure-coding aws amazon-cognito+5
2020-03-06	Tool demo	Nullcon	Wolverine	Furqan Khan, Siddharth Anbalahan	linux secure-coding web-application-security+3
2020-03-06	Tool demo	Nullcon	Talisman	Suhas Vishwanath	opensource secure-development development+5
2019-12-04	Tool demo	Blackhat	AutoMacTC: Finding Worms in Apple Orchards - Using AutoMacTC for macOS Incident Response	Kshitij Kumar, Jai Musunuri	macos secure-coding forensic+2
2019-09-27	Talk	C0c0n	autoSource an automated framework for Source Code Review	Malkit Singh	code-review secure-coding static-analysis+3
2019-09-27	Talk	C0c0n	Golang for Pentesters / RedTeamers	Anant Shrivastava	pentest redteam secure-coding
2019-09-27	Talk	C0c0n	Serverless SOAR	Sabyasachi Dhal, Suresh Sharma	secure-coding pentest
2019-09-27	Talk	C0c0n	VyAPI - The Vulnerable Hybrid Android App	Riddhi Shree	secure-coding aws amazon-cognito+5
2019-09-27	Talk	C0c0n	Practical Approach to Cyber Security for financial institutions	Georgie Kurien	financial-institutions secure-development risk-management+2
2019-09-27	Talk	C0c0n	Security @scale for startups	Shivanath Somanathan	devsecops secure-development software-security+2
2019-09-27	Talk	C0c0n	Stepping into Password Less Economy	Ajit Hatti	authentication identity-management secure-development+1
2019-09-23	Talk	Rootcon	Identity crisis: war stories from authentication failures	Vishal Chauhan	authentication identity-management vulnerability-assessment+3
2019-09-13	Talk	44 Con	One Person Army – Playbook on how to be the first Security Engineer at a company	Kashish Mittal	infrastructure devsecops Automation
2019-09-13	Talk	Global App Sec	Real Time Vulnerability Alerting by Using Principles from the United States Tsunami Warning Center	Amol Sarwate	vulnerability-management aws security-information-event-management+1
2019-08-30	Talk	Hitb Sec Conf	COMMSEC: PErfidious: Make PE Backdooring Great Again!	Shreyans Doshi	secure-coding redteam blueteam+1
2019-08-11	Talk	Defcon	Exploiting and Securing iOS Apps using OWASP iGoat	Swaroop Yermalkar	mobile-security ios-security application-pentesting+4
2019-08-11	Talk	Defcon	Shifting the DevSecOps Culture, Taking away the sugar piece and giving the pile to ants	Vandana Verma Sehgal	devsecops secure-development Automation+4
2019-08-08	Talk	Defcon	Phishing in the cloud era	Ashwin Vamshi, Abhinav Singh	phishing api-security web-security+2
2019-08-08	Talk	Blackhat	DevSecOps : What, Why and How	Anant Shrivastava	devsecops development devops
2019-08-08	Talk	Defcon	Anatomy of cloud hacking	Pratik Shah	cloud-pentesting post-exploitation cloud-architecture+1
2019-03-28	Talk	Blackhat	DevSecOps : What, Why and How	Anant Shrivastava	devsecops secure-coding
2019-03-28	Tool demo	Blackhat	Kurukshetra: Playground for Interactive Security Learning	Anirudh Anand, Mohan Kallepalli, Ankur Bhargava	secure-coding web blueteam
2019-03-28	Tool demo	Blackhat	pytm: A Pythonic Framework for Threat Modeling	Rohit Shambhuni	secure-coding threat_modeling redteam
2019-03-28	Tool demo	Blackhat	OWASP Nettacker: Automated Penetration Testing Framework	Sri Harsha Gajavalli	network-pentesting vulnerability-assessment firewall+3
2019-02-28	Talk	Nullcon	Andromeda - GUI based Dynamic Instrumentation Toolkit powered by Frida	Shivang Desai	secure-coding pentest
2019-02-28	Talk	Nullcon	Building Hardened IoT Implementations with LangSec	Prashant Anantharaman	iot blueteam secure-development
2018-12-05	Tool demo	Blackhat	Kurukshetra: Playground for Interactive Security Learning	Anirudh Anand, Mohan Kallepalli	secure-coding web blueteam
2018-10-19	Talk	App Sec Day Australia	Threat Modeling-as-Code & Automation for DevSecOps wins	Abhay Bhargav	threat_modeling devsecops
2018-10-10	Talk	Brucon	Simplifying the art of instrumentation	Krishnakant Patil, Rushikesh D Nandedkar	reverse-engineering static-analysis dynamic-analysis+2
2018-10-05	Talk	C0c0n	SCANDA: To Unbosom Malware Behavior	Rajesh Nikam, Parmanand Mishra	malware reverse-engineering dynamic-analysis+2
2018-09-27	Talk	Rootcon	Defending cloud Infrastructures with Cloud Security Suite	Shivankar Madaan	cloud aws infrastructure+5
2018-08-11	Tool demo	Defcon	Halcyon IDE	Sanoop Thomas	reconnaissance redteam nmap+1
2018-08-11	Tool demo	Defcon	Sh00t—An open platform for manual security testers & bug hunters	Pavan Mohan	pentest bug-hunting opensource+3
2018-08-08	Tool demo	Blackhat	AutoMacTC: Finding Worms in Apple Orchards - Using AutoMacTC for macOS Incident Response	Kshitij Kumar, Jai Musunuri	macos secure-coding forensic+2
2018-08-08	Tool demo	Blackhat	Halcyon IDE: For Nmap Script Developers	Sanoop Thomas	reconnaissance redteam nmap+1
2018-08-08	Tool demo	Blackhat	SCoDA: Smart COntract Defender and Analyzer	Ajit Hatti	blueteam analysis secure-coding
2018-06-27	Talk	First	Securing your in-ear fitness coach: Challenges in hardening next generation wearables	Sumanth Naropanth, Sunil Kumar	mobile-security secure-development vulnerability-management+2
2018-03-13	Talk	Troopers	Securing your in-ear fitness coach: Challenges in hardening next generation wearables	Sumanth Naropanth, Kavya Racharla	mobile-security secure-development vulnerability-management+2
2018-01-31	Talk	Owasp App Sec California	Hunter – Optimize your Pentesters time	Kiran Shirali	application-pentesting pentesting vulnerability-management+2
2017-10-05	Talk	Brucon	Races, Reaches and Rescues!!! (Race condition vulnerabilities revisited)	Rushikesh D Nandedkar, Sampada Nandedkar	vulnerability-assessment pentesting secure-coding+2
2017-09-21	Talk	App Sec Usa	Androsia: A tool for securing in memory sensitive data	Samit Anwer	android-security mobile-security static-analysis+1
2017-08-19	Talk	C0c0n	Building Trust for Digital Transactions in India’s COD Culture	Parry Aftab	secure-development risk-management security-architecture
2017-08-18	Talk	C0c0n	Androsia: A tool for securing in memory sensitive data	Samit Anwer	secure-coding android mobile+1
2017-08-18	Talk	C0c0n	Cloud_Security Suite - One stop tool for auditing cloud infrastructure	Shivankar Madaan, Jayesh Chauhan	cloud aws infrastructure+5
2017-08-18	Talk	C0c0n	iGoat – A Self Learning Tool for iOS App Pentesting and Security	Swaroop Yermalkar	ios mobile pentest+3
2017-08-18	Talk	C0c0n	Dynamic Binary Instrumentation	Vivek Arora, Bhaskar Rastogi	dynamic-analysis reverse-engineering binary-analysis+1
2017-07-30	Tool demo	Blackhat	Yasuo	Saurabh Harit	secure-coding redteam blueteam+4
2017-07-28	Tool demo	Defcon	Lamma 1.0	Ajit Hatti, Antriksh Shah	cryptography pentest audit+1
2017-07-27	Tool demo	Blackhat	Fuzzapi - Fuzzing Your RESTAPIs Since Yesterday	Lalith Rallabhandi, Abhijeth Dugginapeddi, Srinivas Rao	fuzzing api rest-api+3
2017-07-27	Tool demo	Blackhat	Gibber Sense	Ajit Hatti	secure-coding reconnaissance cryptography+3
2017-07-27	Talk	Defcon	Recon and bug bounties what a great love story	Abhijeth Dugginapeddi	vulnerability-assessment bug-bounty network-pentesting+1
2017-07-26	Tool demo	Blackhat	Devknox - Autocorrect Security Issues from Android Studio	Subho Halder	android mobile code-analysis+1
2017-06-23	Talk	Hackinparis	Injecting Security into Web apps with Runtime Patching and Context Learning	Ajin Abraham	web blueteam secure-development+6
2017-05-23	Talk	Phdays	Injecting security into web apps in the runtime	Ajin Abraham	web blueteam secure-development+6
2017-03-30	Tool demo	Blackhat	Devknox - Autocorrect Security Issues from Android Studio	Subho Halder	android mobile code-analysis+1
2017-03-23	Talk	Troopers	How we hacked Distributed Configuration Management Systems	Bharadwaj Machiraju	pentesting application-pentesting vulnerability-assessment+4
2017-03-23	Talk	Troopers	How we hacked Distributed Configuration Management Systems	Francis Alexander	pentesting application-pentesting vulnerability-assessment+4
2017-03-03	Talk	Nullcon	Injecting Security into Web apps with Runtime Patching and Context Learning	Ajin Abraham	web blueteam secure-development+6
2017-03-03	Talk	Nullcon	DevOpSec: Rapid Security in the Cloud with AWS and CIS	Mikhail Advani, Rajesh Tamhane	devsecops cloud aws+2
2017-01-25	Talk	Owasp App Sec California	DASTProxy: Don’t let your automated security testing program stall on crawlInstead focus on business context	Kiran Shirali	dynamic-analysis dast devsecops+3
2017-01-25	Talk	Owasp App Sec California	OCSP Stapling in the Wild	Devdatta Akhawe	web-security vulnerability-management security-architecture+1
2016-11-04	Tool demo	Blackhat	Yasuo	Saurabh Harit	secure-coding redteam blueteam+4
2016-10-13	Talk	App Sec Usa	When encryption is not enough: Attacking Wearable - Mobile Application communication over BLE	Sumanth Naropanth, Kavya Racharla	mobile-security vulnerability-management reverse-engineering+1
2016-10-07	Talk	Deepsec	Inside Stegosploit	Saumil Shah	web-security exploitation pentesting+1
2016-09-23	Talk	Rootcon	Halcyon – A Faster Way to Build Custom Scripts for Nmap Scans	Sanoop Thomas	secure-coding reconnaissance redteam+1
2016-08-19	Talk	C0c0n	Kill the password - A new era of authentication	Tamaghna Basu	authentication iam security-architecture+1
2016-08-07	Talk	Defcon	Cyber Grand Shellphish	Aravind Machiry	automated-exploit-detection reverse-engineering vulnerability-assessment+1
2016-08-06	Tool demo	Defcon	LAMMA (beta)	Ajit Hatti	cryptography pentest audit+1
2016-08-04	Tool demo	Blackhat	Droid-FF: Android Fuzzing Framework	Anto Joseph	android fuzzing secure-coding+2
2016-08-04	Tool demo	Blackhat	Maltese (Malware Traffic Emulating Software)	Sasi Siddharth	dns web secure-coding
2016-08-04	Tool demo	Blackhat	LAMMA	Ajit Hatti	cryptography pentest audit+1
2016-05-26	Talk	Hitb Sec Conf	HITB Lab: Mobile Application Security for iOS and Android	Tushar Dalvi	mobile android ios+3
2016-03-15	Talk	Groundzerosummit	Web App Security	Harpreet Singh, Himanshu Sharma, Nipun Jaswal	web-security api-security secure-coding+3
2016-03-11	Talk	Nullcon	Real-time Ingestion of security telemetry data into Hadoop distributed system to respond to 0-day	Pallav Jakhotiya, Vipul Sawant	hadoop secure-development blueteam
2015-11-05	Talk	Ground Zero Summit	Sanctioned to Hack: Your SCADA HMIs Belong to Us!	Aditya K Sood	ics-security web-security vulnerability-management+3
2015-09-24	Talk	App Sec Usa	Continuous Cloud Security Automation	Rohit Pitke	aws devsecops Automation+2
2015-08-07	Talk	Defcon	Hacker’s Practice Ground	Lokesh Pidawekar	pentesting ethical-hacking vulnerability-assessment+2
2015-08-05	Tool demo	Blackhat	PixelCaptcha: A unicode based captcha scheme	Gursev Singh Kalra	captcha secure-coding development
2015-08-01	Talk	C0c0n	NoPo - The NoSQL HoneyPot Framework	Francis Alexander	nosql secure-coding
2015-03-15	Talk	Blackhat	2015 State of Vulnerability Exploits	Amol Sarwate	vulnerability-management automated-scanning vulnerability-assessment+2
2015-03-15	Talk	Defcon	TECHNICAL TALK-WIHAWK: ROUTER VULNERABILITY SCANNER	Anamika Singh	network-pentesting vulnerability-assessment vulnerability-management+2
2015-02-06	Talk	Nullcon	Building security and compliance into the software delivery process	Anubhav Bathla, Dinesh Pillai, S Chandrasekhar	secure-development devsecops compliance+3
2015-02-06	Talk	Nullcon	Building custom scans for real world enterprise network	Sanoop Thomas	pentesting network-pentesting vulnerability-assessment+2
2015-01-27	Talk	Owasp App Sec California	The Emperor’s New Password Manager: Security Analysis of Web-based Password Managers	Devdatta Akhawe	web-security xss csrf+3
2014-11-13	Talk	Ground Zero Summit	Cyber ‘BrahMos’ - Static analysis driven secure coding	Joy Sen	secure-coding
2014-09-26	Talk	Virus Bulletin	Evolution of Android exploits from a static analysis tools perspective	Jagadeesh Chandraiah	android-security static-analysis vulnerability-management+2
2014-08-22	Talk	C0c0n	Still Single with a bleeding heart (Tool Release)	Tamaghna Basu	secure-development vulnerability-management
2014-08-21	Talk	Usenix	The Emperor’s New Password Manager: Security Analysis of Web-based Password Managers	Devdatta Akhawe	web-security xss csrf+3
2014-06-23	Talk	Hackinparis	Pentesting NoSQL DB’s with NoSQL Exploitation Framework	Francis Alexander	nosql secure-coding pentest
2014-03-08	Talk	Defcon	WI-Hawk	Anamika Singh	network-pentesting vulnerability-assessment network-vulnerability-assessment+3
2014-02-14	Talk	Nullcon	Attack of the setuid bit - pt_chown and pwning root terminals	Siddhesh Poyarekar	glibc redteam blueteam+2
2014-01-28	Talk	Owasp App Sec California	Application Sandboxes: Know thy limits	Rahul Kashyap	application-pentesting reverse-engineering vulnerability-management+1
2013-11-21	Talk	Appsec Usa	Wassup MOM? Owning the Message Oriented Middleware	Gursev Singh Kalra	api-security vulnerability-management secure-coding+1
2013-11-20	Talk	App Sec Usa	Project Talk: OWASP OpenSAMM Project	Pravir Chandra	software-security secure-development devsecops+4
2013-09-27	Talk	C0c0n	Infiltrating the Intranet with Skanda	Jayesh Chauhan	redteam secure-coding
2013-09-27	Talk	C0c0n	Snake Bites	Anant Shrivastava	secure-coding web pentest+1
2013-09-27	Talk	C0c0n	Static analysis of malware with PyTriage	Yashin Mehaboobe	secure-coding
2013-09-27	Talk	C0c0n	Sandy - The Malicious Analysis	Rahul Sasi	reverse-engineering static-analysis dynamic-analysis
2013-09-27	Talk	C0c0n	From Bedroom to Boardroom - Taking your Weekend Infosec Project Global	Vivek Ramachandran	devsecops secure-development pentesting+2
2013-09-13	Talk	Grrcon	Matriux Leandros - An Open Source Penetration Testing and Forensic Distribution	Prajwal Panchmahalkar	pentesting forensics digital-forensics+2
2013-08-15	Talk	Usenix	Alice in Warningland: A Large-Scale Field Study of Browser Security Warning Effectiveness	Devdatta Akhawe	web-security security-awareness security-architecture+3
2013-08-15	Talk	Usenix	An Empirical Study of Vulnerability Rewards Programs	Devdatta Akhawe	vulnerability-management bug-bounty software-security+3
2013-08-01	Tool demo	Blackhat	Sparty	Aditya K Sood	secure-coding web audit+2
2013-08-01	Tool demo	Blackhat	XENOTIX xBOT	Ajin Abraham	botnet linux windows+3
2013-03-01	Talk	Nullcon	Mobile Code mining for discovery and exploits	Hemil Shah	mobile code-analysis secure-development+5
2012-12-06	Talk	Blackhat	The art of exploiting logical flaws in web apps	Sumit Siddharth	web redteam secure-coding
2012-10-26	Talk	App Sec Usa	The 7 Qualities of Highly Secure Software	Mano Paul	secure-development software-security secure-coding+3
2012-10-25	Talk	App Sec Usa	Cross Site Port Scanning	Riyaz Walikar	web-security vulnerability-management owasp+1
2012-09-28	Talk	Nullcon	Alert(/xss/) - How to catch an XSS before someone exploits / reports it?	Ahamed Nafeez	web-security xss secure-coding+2
2012-07-14	Talk	Hope	Advancements in Botnet Attacks and Malware Distribution	Aditya K Sood	malware botnet web-security+2
2012-03-15	Talk	Nullcon	An App(le) a day keeps the wallet away	Antriksh Shah	pentesting web-security api-security+1
2012-02-15	Talk	Nullcon	Best practices to improve the security grading of your project	Hemant Khandelwal	blueteam threat_modeling secure-development
2011-09-19	Talk	Brucon	Step-by-Step for Software Security (that anyone can follow)	Pravir Chandra	software-security secure-development devsecops+4
2011-09-07	Talk	Securitybyte	Social Web & Privacy – An evolving world	Bala Sathiamurthy, Aridaman Tripathi	privacy data-protection api-security+3
2011-09-06	Talk	Securitybyte	Application Security Strategies	K K Mookhey	secure-coding secure-development web-security+3
2011-09-06	Talk	Securitybyte	Enabling Un-trusted Mashups	Bishan Singh	web-security xss csrf+4
2011-09-06	Talk	Securitybyte	Security Threats on Social Networks	Nithya Raman	social-engineering web-security security-awareness+2
2011-02-25	Talk	Nullcon	(secure) SiteHoster – Disable XSS & SQL Injection	Abhishek Kumar	xss sqli blueteam+2
2010-11-25	Talk	Deepsec	Developers are from Mars, Compliance Auditors are from Venus	Neelay S Shah	compliance governance risk-management+4
2010-11-11	Talk	Blackhat	Attacking with HTML5	Lavakumar Kuppan	web-security xss web-pentesting+1
2010-04-14	Talk	Blackhat	Attacking JAVA Serialized Communication	Manish Saindane	secure-coding redteam network+1
2010-03-15	Talk	Blackhat	400 Apps in 40 Days	Nish Bhalla	vulnerability-management risk-management application-pentesting+2
2009-12-05	Talk	Clubhack	Revealing the Secrets: Source Code Disclosure, Techniques and Impacts	Anant Kochhar	secure-development secure-coding
2009-11-19	Talk	Deepsec	Top 10 Security Issues Developers Don’t Know About	Neelay S Shah	secure-coding devsecops vulnerability-management+3
2009-11-17	Talk	Securitybyte	Applications - The new cyber security frontier	Mano Paul	secure-development devsecops software-security+2
2009-11-17	Talk	Securitybyte	Usability and Privacy in Security	Ponnurangam Kumaraguru	privacy data-protection security-architecture+3
2009-05-19	Talk	Syscan	Securing Enterprise Applications	Shreeraj Shah	blueteam web web-application-security+13
2009-05-19	Talk	Syscan	Securing Applications at Gateway with Web Application Firewalls	Shreeraj Shah	blueteam web footprinting+3
2009-04-22	Talk	Hitb Sec Conf	Application Defense Tactics & Strategies - WAF at the Gateway	Shreeraj Shah	blueteam web footprinting+3
2008-12-06	Talk	Clubhack	Insecure Implementation of Security Best Practices: of hashing, CAPTCHA’s and Caching	Karmendra Kohli	secure-development secure-coding blueteam+2
2008-12-06	Talk	Clubhack	Reverse Engineering v/s Secure Coding	Atul Alex	secure-coding reverse-engineering redteam+2
2008-10-29	Talk	Hitb Sec Conf	Top 10 Web 2.0 Attacks	Shreeraj Shah	blueteam web-application-security ajax+8
2008-04-16	Talk	Hitb Sec Conf	Securing Next Generation Applications â€“ Scan, Detect and Mitigate	Shreeraj Shah	blueteam web-application-security ajax+8
2008-03-27	Talk	Blackhat	Iron Chef Black Hat: John Henry Challenge	Pravir Chandra	ethical-hacking secure-development devsecops
2007-08-02	Talk	Blackhat	Breaking C++ Applications	Neel Mehta	redteam secure-coding api
2007-03-15	Talk	Blackhat	Exploit-Me Series – Free Firefox Application Penetration Testing Suite Launch	Nish Bhalla, Rohit Sethi	web-security xss sql-injection+4
2006-09-21	Talk	Hitb Sec Conf	Finding Secrets in ISAPI	Nish Bhalla	secure-coding reverse-engineering
2006-08-02	Talk	Blackhat	SQL Injections by Truncation	Bala Neerumalla	web-security sql-injection secure-coding+1
2006-01-26	Talk	Blackhat	Analysis of Adversarial Code: Problem, Challenges, Results	Arun Lakhotia	analysis secure-coding blueteam
2005-09-29	Talk	Hitb Sec Conf	Analyzing Code for Security Defects	Nish Bhalla	code-analysis blueteam secure-coding
2003-12-12	Talk	Hitb Sec Conf	Defending Web Applications: Strategies, methods and practices	Shreeraj Shah	web blueteam secure-coding+2

🧪 Experimental Feature

Application Security

Top Contributors

Related Tags (16)

All Entries (244 total, sorted by date)