Secure Programming and Common Errors PART II

Hi to all my readers.

Today I will present the second part of my security seminars at University of Bologna, Italy.

Here the outline:

  • Discuss other important attack vectors, not limited to Web Applications
  • Practical screen-casts that show how attackers exploit common flows
  • Understand the impact of these threats on your privacy, data and identity

You can find the slides here below:

Secure Programming And Common Errors Part II
View more documents from Michele Orru’.

The ScreenCasts can be watched at the following links on Vimeo:
– EsseDi path traversal for fun and profit: http://vimeo.com/8072462
– Unescaped numeric injection in www.dm.unibo.it: http://vimeo.com/8072698
– Konakart 2.2.6.0 stored XSS explitation with BeEF: http://vimeo.com/8072425
– WMSmonitor: reflected XSS exploitation using BeEF: http://vimeo.com/8072497
– Appendix: Sniffing SSL/TLS Connections Through Fake Certificate Injection: http://vimeo.com/8072385

Tags: , , ,

This entry was posted on Wednesday, December 9th, 2009 at 9:33 am and is filed under News . You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.

4 Responses to “Secure Programming and Common Errors PART II”

  • He4dShOt Says:
    December 9th, 2009 at 7:51 pm

    Ciao, non ho capito se usi tor anche per il path traversal su essedi…

  • admin Says:
    December 10th, 2009 at 9:01 am

    Ciao He4dShOt,
    Si lo uso il 99% delle volte, compresa quella che dici tu su essedi.

    Se guardi bene il video su vimeo (http://vimeo.com/8072462) vedi proprio il settaggio di Privoxy in Burp (minuto 0:09), un po’ coperto dal commento scritto in bianco sul nero.

    Cheers
    AntiSnatchOr

  • ??? Says:
    December 15th, 2009 at 11:46 am

    Ciao, ora dirò un eresia…

    E’ possibile avere i lucidi in italiano?

    Ho paura di comprenderli male se la mia traduzione non è propriamente corretta e, si sà, l’inglese ha molte sfaccendature…

    Se non è possibile fa lo stesso, io ci ho provato.

    Grazie per le bellissime e interessantissime lezioni che ci hai tenuto!!!

  • admin Says:
    December 19th, 2009 at 7:07 pm

    Ciao
    Grazie per i complimenti, ma purtroppo le slides in italiano proprio non esistono.
    Quando scrivo materiale tecnico in ambito IT (e specialmente roba di hacking), mi sento maggiormente a mio agio scrivendo in inglese.

    I’m sorry :)

Leave a Reply