AppSec Village™
81 talks · 2020–2024 · indexed by Breach Arc Archive. Links open each talk on YouTube.
Browse with filters →- Avi Lumelsky & Gal Elbaz- 0.0.0.0 Day: Exploiting Localhost APIs From The Browser- DEF CON 32 2024
- Ben Dechrai- Fine Grained Authorisation with Relationship Based Access Control- DEF CON 32 2024
- Cassie Crossley- The Missing Link: How we collect & leverage SBOMs- DEF CON 32 2024
- Elad Pticha & Oreen Livni- Your CI/CD Pipeline Is Vulnerable, But It's Not Your Fault- DEF CON 32 2024
- Expert Panel- Transforming AppSec Protecting 'Everything as Code' & Emerging Tech- DEF CON 32 2024
- James McKee- Navigating the Cyber Security Labyrinth: Choose Your Own Security Adventure- DEF CON 32 2024
- Jason Haddix- The Dark Side of Bug Bounty- DEF CON 32 2024
- Jerry Gamblin- Using EPSS for Better Vulnerability Management- DEF CON 32 2024
- Peiyu Wang- Web2 Meets Web3 Hacking Decentralized Applications- DEF CON 32 2024
- Ravid Mazon & Jay Chen- BOLABuster Harnessing LLMs for Automating BOLA Detection- DEF CON 32 2024
- Spyros Gasteratos & Andra Lezza- Engineers & Exploits The Quest for Security- DEF CON 32 2024
- Tanya Janca- Maturing Your Application Security Program- DEF CON 32 2024
- Vangelis Stykas- Gridlock: The Dual Edged Sword of EV & Solar APIs in Grid Security- DEF CON 32 2024
- Vikas Khanna- Unlocking the Gates: Understanding Authentication Bypass Vulnerabilities- DEF CON 32 2024
- Winners Announcement of the Fix the Flag War Game of AppSec Village at DEF CON 32, Powered by SecDim 2024
- Ankur Chowdhary- GAN-based Autonomous Penetration Testing for Web Applications- DEF CON 31 2023
- Chris Roberts- From Camels to Collaboration, A Journey Through Technology AND Humans- DEF CON 31 2023
- Dohyeon Kim & WooWon Kang- Protecting Front-End Applications from Overlooked Vulns- DEF CON 31 2023
- Emile Spir & Emmanuelle Lejeail- WAF: Making a Problematic Security Tool Suck Less- DEF CON 31 2023
- Felipe Molina- Dress Code: Analysis of the current status of the Content Security Policy- DEF CON 31 2023
- Gabrielle Botbol- Android Applications and APIs hacking- DEF CON 31- AppSec Village 2023
- Gal Elbaz, Guy Kaplan- Discovering Shadow Vulnerabilities in Popular Open Source Projects DEF CON 31 2023
- Jason Haddix- SusParams: Hypercharge your web testing with DATA- DEF CON 31- AppSec Village 2023
- Jeffrey Guerra & Logan MacLaren- Building a Great Bug Bounty Program- DEF CON 31- AppSec Village 2023
- Kalyani Pawar- Unveiling the Dual Nature of ChatGPT and Copilot in Secure Development- DEF CON 31 2023
- Ken Pyle- Living off the Land with Connectwise: How I Built An Attack Platform & Botnet! DEF CON 31 2023
- Larkins Carvalho & Nielet D'mello- Threat Modeling-based Application Security Pipeline- DEF CON 31 2023
- Maril Vernon- Collaborative Security Fostering Innovation and Resilient Cyber Practices- DEF CON 31 2023
- Panel- Insights from AppSec Experts on Prioritizing Security Alerts- DEF CON 31- AppSec Village 2023
- Vandana Verma Sehgal & Viraj Gandhi- Appsec on a Limited Budget- DEF CON 31- AppSec Village 2023
- Cezary Cerekwicki - How to find 0-days in your “memory safe” stack? - DEF CON 30 AppSec Village 2022
- Chris Kubecka - Wartime AppSec - DEF CON 30 - AppSec Village 2022
- Guy Barnhart-Magen & Brenton Morris - Log4J: An Incident Response Perspective - DEF CON 30 2022
- Inaae Kim - No Code Security Review - What to review in apps w/o code? - DEF CON 30 AppSec Village 2022
- Joylynn Kirui - AppSec Nuggets : Bolstering security first mindset - DEF CON 30 AppSec Village 2022
- Kennashka DeSilva & Aimee Reyes - Hacking & Defending Blockchain Apps - DEF CON 30 AppSec Village 2022
- Lars Skjorestad - Running system tests with active authn/z - DEF CON 30 - AppSec Village 2022
- Robyn Lundin - Why Your Pentest Findings are So Boring - DEF CON 30 - AppSec Village 2022
- Rotem Bar - Hacking 8M+ websites: Ethical dilemmas when bug hunting - DEF CON 30 - AppSec Village 2022
- Roy Erlich, Emil Vaagland, Seth Kirschner, Vandana Verma Sehgal - Agility Broke AppSec - DEF CON 30 2022
- Adam Schaal - A Deep Dive Into Supply Chain Vulnerabilities - DEF CON 29 AppSec Village 2021
- Alex Hoffman - 0-Days & Nat 20's - CVSSv3 Through the Lens of D&D - DEF CON 29 AppSec Village 2021
- Alexei Kojenov - I used AppSec skills to hack IoT, and so can you - DEF CON 29 AppSec Village 2021
- Alton Crossley - Can’t Stop the Code: Embrace the Code - DEF CON 29 AppSec Village 2021
- Amir Shaked - CSP is broken, let’s fix it - DEF CON 29 AppSec Village 2021
- Arjun Gopalakrishna - AppSec 101: A Journey from Engineer to Hacker - DEF CON 29 AppSec Village 2021
- Chen Gour-Arie - Cross-document messaging technology, hack it and use it - DEF CON 29 AppSec Village 2021
- Cheryl Biswas - Signed, Sealed, Delivered: Abusing Trust in Supply Chain - DEF CON 29 AppSec Village 2021
- Emanuel Rodrigues - Poking bots for fun and profit - DEF CON 29 AppSec Village 2021
- Erin Browning & Tim Faraci - Scaling static analysis for free - DEF CON 29 AppSec Village 2021
- Gal Nagli - Vulnerability Inheritance - Attacking through 3rd party - DEF CON 29 AppSec Village 2021
- Grant Ongers - Scaling AppSec through Education - DEF CON 29 AppSec Village 2021
- James McKee (punkcoder) - Encryption for Developers - DEF CON 29 AppSec Village 2021
- Jay Turla - Car Hacking + Bug Hunting Field Guide for Appsec Hackers - DEF CON 29 AppSec Village 2021
- Jeremy Brown - Summer of Fuzz: MacOS - DEF CON 29 AppSec Village 2021
- Magno Logan - DevSecOps: Merging Security and Software Engineering - DEF CON 29 AppSec Village 2021
- Matthew Coles & Izar Tarandach - DFDs Ain't That Bad - DEF CON 29 AppSec Village 2021
- Mazin Ahmed - Attack Vectors on Terraform Environments - DEF CON 29 AppSec Village 2021
- Vandana Verma Sehgal - The Curious Case of Knowing the Unknown - DEF CON 29 AppSec Village 2021
- Vee - When nothing goes right, push left - DEF CON 29 AppSec Village 2021
- Yakov Shafranovich - The Poisoned Diary: Supply Chain Attacks on Install scripts - DEF CON 29 AppSec 2021
- Kelley Robinson - 2FA in 2020 and Beyond - DEF CON 28SM AppSec Village 2020
- Chloe Messdaghi- The Elephant in the Room: Burnout- DEF CON 28SM AppSec
- Christian Schneider - Threagile- Agile Threat Modeling w/Open-Srce Tools w/in IDE- DEF CON 28SM ASV
- CTF Winner and Closing Remarks - AppSec Village DEF CON 28SM
- David Sopas | Paulo Silva - API (in)Security TOP 10: Guided tour - DEF CON 28SM AppSec Village
- David Waldrop - The DevOps & Agile Security Toolkit - DEF CON 28SM AppSec
- Flee Lee- Be Like Water: What Bruce Lee Can Teach Us About AppSec- DEF CON 28SM AppSec
- Jarrod Overson - Hackium: a browser for web hackers - DEF CON 28SM AppSec Village
- Maddie Stone - Who’s Secure, Who’s Not, & Who Makes That Choice - DEF CON 28SM AppSec Village
- Mario Areias - Threat Modelling the Death Star - DEF CON 28SM AppSec Village
- Mehmet Ince - A Heaven for Hackers: Breaking a Web Security Virtual Appliances - DEF CON 28SM AppSec
- Parsia Hakimian - localghost: Escaping Browser Sandbox Without 0-Days - DEF CON 28SM AppSec Village
- Paul Amar | Stanislas Molveau - Offsec mindset to developer's toolset - DEF CON 28SM AppSec Village
- Pedro Umbelino | Joao Morais - Android Bug Foraging - DEF CON 28SM AppSec Village
- Philipp Krenn - Secure Your Code — Injections and Logging - DEF CON 28SM AppSec
- Phillip Marlow - Can't Touch This: Detecting Lateral Mvmnt in 0-Touch Environs - DEF CON 28SM AppSec
- Vandana Verma Sehgal- Running an AppSec Program with Open Source Projects- DEF CON 28SM AppSec
- Workshop: Graham Bleaney - Pysa to Identify Python Vulnerabilities - DEF CON 28SM AppSec Village
- Workshop: Joe Schottman - Threat hunting intro (Web Shell Hunting BG) - DEF CON 28SM AppSec Village
- Workshop: Joe Schottman - Web Shell Threat Hunting - DEF CON 28SM AppSec Village