Orange Cyberdefense Trainings - Web Application Hacking

Orange Cyberdefense is the expert cybersecurity business unit of the Orange Group, providing managed security, managed threat detection & response services to organizations around the globe. As Europe’s go-to security provider, we strive to protect freedom andbuild a safer digital society.We are a threat research and intelligence-driven security provider offering unparalleled access to current and emerging threats. With a 25+ year track record in information security, 250+ researchers & analysts and 16 SOCs distributed across the world and sales and services support in 160 countries, we can offer global protection with local expertise and support our customers throughout the entire threat lifecycle.We are proud of our high-end security research unit,  thanks to which we publish regularly white papers, articles and tools on cybersecurity which are widely recognised and used throughout the industry and featured at industry conferences including, Infosec, Manchester DTX, RSA, BlackHat and DefCon.A critical part of our business is ourHacking Training Facilitywhich we deliver viaSensePost, the pentesting arm or Orange Cyberdefense.SensePosthave trained thousands of students on the art of network and application exploitation for the past decade. Our courses are developed from the work we perform for clients, so that you get a better understanding of how to exploit real-world scenarios. As one of Blackhat briefings longstanding training partners, our courses have taught thousands of students about the art of offensive and defensive approaches.Our introductory course for those starting the journey into penetration testing or those working in environments where understanding how hackers think and the tools, tactics and techniques they use. The course presents the background information, technical skills and basic concepts required to those desiring a foundation in the world of information security.unparalleled

Orange Cyberdefense UK

***Ticket information: please note the course price includes VAT***
This course will teach you how to analyse web applications for vulnerabilities and exploit them.
SensePost has been conducting penetration tests against web applications for nearly two decades and has distilled its approach into this course. Providing a thorough and scientific approach, techniques to maximise coverage of an application will be taught. Whether you're a developer looking to better understand how to defend your applications or a penetration tester looking to enhance your web application bug hunting, this course is for you. This course is highly practical, with over 22 different practical exercises. You'll learn how to hand exploit numerous common web vulnerabilities, and understand the theory behind them. You will be better able to help developers prevent these classes of attacks in their applications. We aim to teach you the trade not just the tricks, and while tools are covered and help, you will be taught how to exploit many of these vulnerabilities by hand. No equipment other than a web browser is needed. We make use of a fully cloud-based and individual virtual training lab meaning no interference from other students, a robust and safe practise environment, and time to experiment throughout.
------------------------------------------------------------------------
 ------------------------------------------------------------------------ Key Takeaways:
- A general approach and methodology for hacking web applications - A good understanding of the tools and techniques for examining web applications - Practical and practiced skills (there are a lot of pracs in this course)
------------------------------------------------------------------------ Some of the topics covered: 
Introduction to web technologies
<UL>
<LI>Understanding the protocols that power the web and getting comfortable with how they look on the wire as well as intercepting and modifying them.</LI>
</UL>
Cookies and Session Management
<UL>
<LI>Understanding how sessions work in applications, and how cookies can be manipulated.</LI>
</UL>
Introduction to Web Vulnerabilities
<UL>
<LI>Theory on what a vulnerability is and an introduction to the OWASP Top 10</LI>
</UL>
Client and Server Side Attacks
<UL>
<LI>Understanding web architectures, and the threat models associated with them as well as several client and server-side vulnerabilities and related exploits.</LI>
</UL>
Indirect Object References
<UL>
<LI>Identifying and exploiting poor authorisations controls.</LI>
<LI>Brute forcing for restricted data.</LI>
</UL>
Path traversal
<UL>
<LI>Exploiting path traversal vulnerabilities and bypass restrictions.</LI>
</UL>
Insecure file upload &amp; file inclusion
<UL>
<LI>Introductions to web shells and code execution attacks.</LI>
</UL>
XSS/CSRF &amp; DOM Injections &amp; Cache Attacks
<UL>
<LI>Manipulating the DOM with various attacks</LI>
<LI>The impact of CDNs and different browser headers</LI>
</UL>
SQL &amp; Command Injection attacks
<UL>
<LI>Understanding data store and operating system setups and how to exploit and explore them</LI>
</UL>
Java Deserialisation
<UL>
<LI>Exploiting deserialisation vulnerabilities with ysoserial</LI>
</UL>
APIs, Microservices &amp; Widgets
<UL>
<LI>Working with APIs, common formats, tools and vulnerabilities</LI>
</UL>
Web Assembly Vulnerabilities
<UL>
<LI>Understanding wasm</LI>
<LI>New attack surface exposed by wasm</LI>
</UL>
Please note, refreshments and lunches included on both days.
------------------------------------------------------------------------

Arrow Education Services

Our {communityGuidelinesLink} describe the sort of content we prohibit on Eventbrite. If you suspect an event may be in violation, you can report it to us so we can investigate.

To report other categories of prohibited or illegal content, submit {link}