Web

• 2024/03/12 Talk : Nullcon : Secure Web Gateways are dead. What’s next? - Vivek Ramachandran
• 2022/09/08 Talk : Nullcon : Web3.0 - Smart Contracts Could Be Leaky - Riddhi Shree
• 2021/08/27 Talk : Hitb Sec Conf : Securing Webviews and The Story Behind CVE-2021–21136 - Shiv Sahni Imdadullah Mohammed
• 2020/10/02 Tool Demo : Blackhat : MalViz.ai - Vasu Sethia Shivam Kataria
• 2020/03/06 Talk : Nullcon : Automated Classification of Web-Application Attacks for Intrusion Detection - Aneet Kumar Dutta
• 2019/10/14 Talk : Hitb Sec Conf : CALL OF DUTY: MODERN BROWSER WARFARE - Dhiraj Mishra
• 2019/08/10 Tool Demo : Defcon : Local Sheriff - Konark Modi
• 2019/08/08 Tool Demo : Blackhat : RWDD: Remote Web Deface Detection Tool - K v Prashant Ade Yoseman Putra
• 2019/05/21 Talk : Phdays : Breaking Microsoft Edge extensions security policies - Nikhil Mittal
• 2019/05/21 Talk : Phdays : Fuzzing 101 - Dhiraj Mishra Zubin Devnani
• 2019/03/28 Tool Demo : Blackhat : Kurukshetra: Playground for Interactive Security Learning - Anirudh Anand Mohan Kallepalli Ankur Bhargava
• 2018/12/05 Tool Demo : Blackhat : Kurukshetra: Playground for Interactive Security Learning - Anirudh Anand Mohan Kallepalli
• 2018/08/12 Talk : Defcon : Last mile authentication problem: Exploiting the missing link in end-to-end secure communication - Siddharth Rao Thanh Bui
• 2018/08/11 Tool Demo : Defcon : DejaVU—An Open Source Deception Framework - Harish Ramadoss Bhadreshkumar Patel
• 2018/08/11 Tool Demo : Defcon : Local Sheriff - Konark Modi
• 2018/08/11 Tool Demo : Defcon : PA Toolkit—Wireshark plugins for Pentesters - Nishant Sharma Jeswin Mathai
• 2018/08/11 Tool Demo : Defcon : Sh00t—An open platform for manual security testers & bug hunters - Pavan Mohan
• 2018/08/09 Tool Demo : Blackhat : Jackhammer: One Security Vulnerability Assessment/Management Tool - Madhusudhan Konda Rajagopal Vr Shreyas Chidambara
• 2018/08/09 Tool Demo : Blackhat : OWASP Offensive Web Testing Framework - Viyat Bhalodia
• 2018/08/08 Talk : Blackhat : Compression Oracle Attacks on VPN Networks - Ahamed Nafeez
• 2018/08/08 Tool Demo : Blackhat : DejaVu: An Open Source Deception Framework - Bhadreshkumar Patel Harish Ramadoss
• 2018/03/01 Talk : Nullcon : SpotPhish: Zero-Hour Phishing Protection - Ganesh Varadarajan
• 2017/08/18 Talk : C0c0n : Are TOR Hidden Services really hidden? Demystifying HS Directory surveillance by injecting Decoys inside TOR! - Abhinav Biswas
• 2017/07/30 Tool Demo : Blackhat : Yasuo - Saurabh Harit
• 2017/07/29 Tool Demo : Defcon : Fuzzapi - Abhijeth Dugginapeddi Lalith Rallabhandi Srinivas Rao
• 2017/06/23 Talk : Hackinparis : Injecting Security into Web apps with Runtime Patching and Context Learning - Ajin Abraham
• 2017/05/23 Talk : Phdays : Injecting security into web apps in the runtime - Ajin Abraham
• 2017/03/03 Talk : Nullcon : Injecting Security into Web apps with Runtime Patching and Context Learning - Ajin Abraham
• 2017/03/03 Talk : Nullcon : Tale of training a Web Terminator! - Bharadwaj Machiraju
• 2016/11/04 Tool Demo : Blackhat : Yasuo - Saurabh Harit
• 2016/08/19 Talk : C0c0n : Abusing Digital Certificates : Malware Style - Ajit Hatti
• 2016/08/19 Talk : C0c0n : Threats in Connected World - Bhavin Gandhi
• 2016/08/04 Tool Demo : Blackhat : Maltese (Malware Traffic Emulating Software) - Sasi Siddharth
• 2016/03/11 Talk : Nullcon : Making Machines think about security for fun and profit - Rahul Sasi
• 2015/11/12 Talk : Blackhat : Stegosploit - Exploit Delivery with Steganography and Polyglots - Saumil Shah
• 2015/11/05 Talk : Ground Zero Summit : Browser based Malware attacks - Harsh Daftary
• 2015/11/05 Talk : Ground Zero Summit : Thanks for the free cookies - Anshul Saxena Nishant Yadav
• 2015/11/05 Talk : Ground Zero Summit : XSS - The art of evading web application filters! - Anirudh Anand
• 2015/09/11 Talk : 44 Con : Stegosploit – Drive-by Browser Exploits using only Images - Saumil Shah
• 2015/08/08 Talk : Defcon : Dissecting the Design of SCADA Web Human Machine Interfaces (HMIs) - Hunting Vulnerabilities - Aditya K Sood
• 2015/08/06 Talk : Blackhat : Harnessing Intelligence from Malware Repositories - Arun Lakhotia Vivek Notani
• 2015/08/01 Talk : C0c0n : Attack chaining for web exploitation- From Information leakage to gaining Root access - Abhijeth Dugginapeddi
• 2015/08/01 Talk : C0c0n : Understanding the known : A deep look at OWASP A9 : Using Components with Known Vulnerabilities - Anant Shrivastava
• 2015/07/06 Talk : Blackhat : DOM FLOW - UNTANGLING THE DOM FOR MORE EASY-JUICY BUGS - Ahamed Nafeez
• 2015/05/28 Talk : Hitb Sec Conf : Stegosploit: Hacking With Pictures - Saumil Shah
• 2015/03/27 Talk : Syscan : Stegosploit - Hacking with Pictures - Saumil Shah
• 2015/02/06 Talk : Nullcon : Analyzing Chrome crash reports at scale - Abhishek Arya
• 2015/02/06 Talk : Nullcon : Pentesting a website with million lines of Javascript - Lavakumar Kuppan Ahamed Nafeez
• 2014/11/13 Talk : Ground Zero Summit : Attacking Web-Proxies like never before - Ahamed Nafeez
• 2014/11/13 Talk : Ground Zero Summit : Evaluating WAF (Web Application Firewall) for Fun and Profit with WOF - Bhaumik Merchant
• 2014/11/13 Talk : Ground Zero Summit : How I won Browser Fuzzing - Amol Naik
• 2014/10/23 Talk : Hacklu : Hacking with Images - Evil Pictures - Saumil Shah
• 2014/09/24 Talk : Brucon : OWASP: OWTF - Bharadwaj Machiraju
• 2014/08/22 Talk : C0c0n : Lesser Known Attack - XML Injection - Amol Naik
• 2014/08/07 Tool Demo : Blackhat : C-SCAD: Assessing Security flaws in clearscada Web_X client! - Aditya K Sood
• 2014/02/15 Tool Demo : Nullcon : DrupSnipe - Ranjeet Sengar Sukesh Pappu
• 2014/02/15 Tool Demo : Nullcon : OWASP OWTF - The Offensive (Web) Testing Framework - Bharadwaj Machiraju Abraham Aranguren
• 2014/02/14 Talk : Nullcon : A security analysis of Browser Extensions - Abhay Rana
• 2014/02/14 Talk : Nullcon : Chrome - OS Security 2014: New and future hotness - Sumit Gwalani
• 2014/02/14 Talk : Nullcon : o’Dea Assertions - Untwining the Security of the SAML Protocol - Achin Kulshrestha
• 2013/11/07 Talk : Ground Zero Summit : IronWASP - Lavakumar Kuppan
• 2013/09/27 Talk : C0c0n : Snake Bites - Anant Shrivastava
• 2013/08/01 Talk : Blackhat : Hot knives through butter: Bypassing automated analysis systems - Abhishek Singh Zheng Bu
• 2013/08/01 Tool Demo : Blackhat : Sparty - Aditya K Sood
• 2013/03/01 Talk : Nullcon : Automating JavaScript Static Analysis - Lavakumar Kuppan
• 2013/03/01 Talk : Nullcon : CSRF Finder as a Mozilla Addon - Piyush Pattanayak
• 2013/03/01 Talk : Nullcon : Detecting and Exploiting XSS Vulnerabilities and Xenotix XSS Exploitation Framework - Ajin Abraham
• 2012/12/06 Talk : Blackhat : HTML5 top 10 threats – Stealth Attack and Silent Exploits - Shreeraj Shah
• 2012/12/06 Talk : Blackhat : The art of exploiting logical flaws in web apps - Sumit Siddharth Richard Dean
• 2012/12/01 Talk : Clubhack : Detecting and Exploiting XSS with Xenotix XSS Exploit Framework - Ajin Abraham
• 2012/12/01 Talk : Clubhack : FatCat Web Based SQL Injector - Sandeep Kamble
• 2012/12/01 Talk : Clubhack : HAWAS – Hybrid Analyzer for Web Application Security - Lavakumar Kuppan
• 2012/12/01 Talk : Clubhack : XSSshell - Vandan Joshi
• 2012/10/11 Talk : Hitb Sec Conf : XSS & CSRF strike back – Powered by HTML5 - Shreeraj Shah
• 2012/09/27 Talk : Grrcon : The Realm of Third Generation Botnet Attacks - Aditya K Sood Dr. Richard J Enbody
• 2012/09/26 Talk : Nullcon : The art of Passive Web Vul Analysis with IronWASP - Lavakumar Kuppan
• 2012/08/03 Talk : C0c0n : WebApp Remote Code Execution using Server Side Scripting Engines - Rahul Sasi
• 2012/07/26 Talk : Blackhat : HTML5 top 10 threats – Stealth Attack and Silent Exploits - Shreeraj Shah
• 2012/03/14 Talk : Blackhat : Hacking XPATH 2.0 - Sumit Siddharth Tom Forbes
• 2012/03/14 Talk : Blackhat : HTML5 top 10 threats – Stealth Attack and Silent Exploits - Shreeraj Shah
• 2012/02/15 Talk : Nullcon : CAPTCHAs for fun and Profit - Gursev Singh Kalra
• 2012/02/15 Talk : Nullcon : Content sniffing Algorithm bypassing techniques and possible attack vectors - Anil Aphale Chaitany Kamble
• 2012/02/15 Talk : Nullcon : Javascript static analysis with IronWASP - Lavakumar Kuppan
• 2012/02/15 Talk : Nullcon : Ra.2 Blackbox DOM-based XSS scanner - Nishant Das Patnaik Sarathi Sabyasachi Sahoo
• 2011/12/04 Talk : Clubhack : DOM XSS – Encounters of the 3rd Kind - Bishan Singh
• 2011/12/04 Talk : Clubhack : One Link Facebook - Anand Pandey
• 2011/11/25 Talk : Malcon : Exploit the Exploit kits - Dhruv Soi
• 2011/10/13 Talk : Hitb Sec Conf : Web Wars 3 - Saumil Shah
• 2011/10/07 Talk : C0c0n : Deep(er) Penetration: Reaching the Internal Network using Exposed Web Applications - Riyaz Walikar
• 2011/10/07 Talk : C0c0n : Secure HTTP Headers or How I can finally convince management to let go of IE6 - Akash Mahajan
• 2011/10/07 Talk : C0c0n : Web Application Backdoor Attack,Evasion and Detection - Rahul Sasi
• 2011/09/19 Talk : Brucon : Botnets and Browsers, Brothers in a Ghost Shell - Aditya K Sood
• 2011/09/07 Talk : Securitybyte : IronWASP - A Web Application Security Testing Platform - Lavakumar Kuppan
• 2011/09/07 Talk : Securitybyte : Web Application Defender - K v Prashant Mohammed Imran
• 2011/09/06 Talk : Securitybyte : Botnets at Application+ layer - Raj Shastrakar
• 2011/09/06 Talk : Securitybyte : Private Internet Circuits - Towards A Next Generation Internet - Sanjay Deshpande
• 2011/08/03 Talk : Blackhat : Reverse Engineering Browser Components: Dissecting and Hacking Silverlight, HTML 5 and Flex - Shreeraj Shah
• 2011/05/20 Talk : Hitb Sec Conf : Next Generation Web Attacks – HTML 5, DOM(L3) and XHR(L2) - Shreeraj Shah
• 2011/05/19 Talk : Hitb Sec Conf : Spying on SpyEye – What Lies Beneath? - Aditya K Sood
• 2011/02/25 Talk : Nullcon : (secure) SiteHoster – Disable XSS & SQL Injection - Abhishek Kumar
• 2011/02/25 Talk : Nullcon : Lessons Learned From 2010 - Saumil Shah
• 2011/02/25 Talk : Nullcon : SSLSmart – Smart SSL Cipher Enumeration - Gursev Singh Kalra
• 2010/12/04 Talk : Clubhack : Attacking with HTML5 - Lavakumar Kuppan
• 2010/12/04 Talk : Clubhack : Firefox Security! - Prasanna Kanagasabai
• 2010/12/04 Talk : Clubhack : Mantra – Free and Open Source security framework based on browser platform - Abhi M Balakrishnan
• 2010/10/13 Talk : Hitb Sec Conf : Hacking a Browser’s DOM – Exploiting Ajax and RIA - Shreeraj Shah
• 2010/08/01 Talk : C0c0n : Code Disclosure over HTTP - Anant Kochhar
• 2010/07/29 Talk : Blackhat : Hacking Browser’s DOM - Exploiting Ajax and RIA - Shreeraj Shah
• 2010/07/29 Talk : Blackhat : Hacking Oracle From Web Apps - Sumit Siddharth
• 2010/07/01 Talk : Hitb Sec Conf : Top 10 Web 2.0 Attacks and Exploits - Shreeraj Shah
• 2010/06/18 Talk : Syscan : REVERSE ENGINEERING WEB 2.0 APPLICATIONS - Shreeraj Shah
• 2010/04/21 Talk : Hitb Sec Conf : Web Security – Going Nowhere? - Saumil Shah
• 2010/02/25 Talk : Nullcon : Imposter ke karnamey: The Browser Phishing Tool. - Lavakumar Kuppan
• 2010/02/25 Talk : Nullcon : Malware Detection Tool for Websites: A Proof-Of-Concept - Anant Kochhar
• 2009/12/05 Talk : Clubhack : Incident Handling and Log Analysis for Web Based Incidents - Manindra Kishore
• 2009/11/18 Talk : Securitybyte : Introduction to Web Protection Library - Anil Chintala
• 2009/11/18 Talk : Securitybyte : Rumbling Infections – Web Malware Ontology - Aditya K Sood
• 2009/10/07 Talk : Hitb Sec Conf : How to Own the World – One Desktop at a Time - Saumil Shah
• 2009/08/01 Talk : Defcon : The Making of the second SQL injection Worm - Sumit Siddharth
• 2009/07/31 Talk : Defcon : Advancing Video Application Attacks with Video Interception, Recording, and Replay - Arjun Sambamoorthy Jason Ostrom
• 2009/05/19 Talk : Syscan : Securing Applications at Gateway with Web Application Firewalls - Shreeraj Shah
• 2009/05/19 Talk : Syscan : Securing Enterprise Applications - Shreeraj Shah
• 2009/04/22 Talk : Hitb Sec Conf : Application Defense Tactics & Strategies - WAF at the Gateway - Shreeraj Shah
• 2009/04/22 Talk : Troopers : Browser Design Flaws – Hacking by Breaking in Architectures - Aditya K Sood
• 2009/02/19 Talk : Blackhat : Blinded by Flash: Widespread Security Risks Flash Developers Don’t See - Prajakta Jagdale
• 2008/11/13 Talk : Deepsec : Game of Web 2.0 Security - Attacking Next Generation Apps - Shreeraj Shah
• 2008/10/29 Talk : Hitb Sec Conf : Browser Exploits - A New Model for Browser Security - Saumil Shah
• 2008/10/29 Talk : Hitb Sec Conf : Top 10 Web 2.0 Attacks - Shreeraj Shah
• 2008/10/22 Talk : Hacklu : Browser Exploits - A new model for Browser security - Saumil Shah
• 2008/08/21 Talk : Owasp App Sec India : AppSec For Managers - Nish Bhalla
• 2008/08/20 Talk : Owasp App Sec India : Application Security Trends & Challenges - Kamlesh Bajaj
• 2008/08/20 Talk : Owasp App Sec India : Building Enterprise AppSec Program - Nish Bhalla
• 2008/08/20 Talk : Owasp App Sec India : Web 2.0 Attacks - Next Generation Threats on the Rise - Shreeraj Shah
• 2008/08/20 Talk : Owasp App Sec India : Web Application Security: Too Costly To Ignore - Rajesh Nayak
• 2008/04/16 Talk : Hitb Sec Conf : Securing Next Generation Applications – Scan, Detect and Mitigate - Shreeraj Shah
• 2008/02/20 Talk : Blackhat : Scanning Applications 2.0 - Next Generation Scan, Attacks and Tools - Shreeraj Shah
• 2007/12/19 Talk : Clubhack : Backdoor 2.0: Hacking Firefox to steal his web secrets - Sunil Arora
• 2007/12/09 Talk : Clubhack : Hacking Web 2.0 Art and Science of Vulnerability Detection - Shreeraj Shah
• 2007/12/09 Talk : Clubhack : The future of automated web application testing - Amish Shah Umesh Nagori
• 2007/11/20 Talk : Deepsec : Web 2.0 Application Kung-Fu - Securing Ajax & Web Services - Shreeraj Shah
• 2007/09/06 Talk : Hitb Sec Conf : Hacking Ajax and Web Services – Next Generation Web Attacks on the Rise - Shreeraj Shah
• 2007/08/02 Talk : Blackhat : Smoke ’em Out! - Rohyt Belani
• 2007/04/05 Talk : Hitb Sec Conf : WEB 2.0 Hacking – Defending Ajax and Web Services - Shreeraj Shah
• 2007/03/30 Talk : Blackhat : Web Service Vulnerabilities - Nish Bhalla
• 2005/09/26 Talk : Hitb Sec Conf : Web hacking Kung-Fu and Art of Defense - Shreeraj Shah
• 2005/04/12 Talk : Hitb Sec Conf : Web Application Kung-Fu, The Art of Defense - Shreeraj Shah
• 2005/03/31 Talk : Blackhat : Defeating Automated Web Assessment Tools - Saumil Shah
• 2004/10/06 Talk : Hitb Sec Conf : Web Services - Attacks and Defense Strategies, Methods and Tools - Shreeraj Shah
• 2004/07/29 Talk : Blackhat : Evasion and Detection of Web Application Attacks - K K Mookhey
• 2004/07/28 Talk : Blackhat : Defeating Automated Web Assessment Tools - Saumil Shah
• 2004/05/19 Talk : Blackhat : HTTP Fingerprinting and Advanced Assessment Techniques - Saumil Shah
• 2004/01/29 Talk : Blackhat : HTTP Fingerprinting and Advanced Assessment Techniques - Saumil Shah
• 2003/12/16 Talk : Blackhat : HTTP Fingerprinting & Advanced Assessment Techniques - Saumil Shah
• 2003/12/12 Talk : Hitb Sec Conf : Defending Web Applications: Strategies, methods and practices - Shreeraj Shah
• 2003/10/01 Talk : Blackhat : HTTP Fingerprinting & Advanced Assessment Techniques - Saumil Shah
• 2003/07/31 Talk : Blackhat : HTTP Fingerprinting & Advanced Assessment Techniques - Saumil Shah
• 2003/02/26 Talk : Blackhat : HTTP: Advanced Assessment Techniques - Saumil Shah
• 2002/10/03 Talk : Blackhat : Top Ten Web Attacks - Saumil Shah
• 2001/11/21 Talk : Blackhat : One-Way SQL Hacking : Futility of Firewalls in Web Hacking - Saumil Shah
• 2001/04/26 Talk : Blackhat : Web Hacking - Saumil Shah
• 2001/02/14 Talk : Blackhat : Web Hacking - Saumil Shah