Full Stack Web Attack (FSWA) Training Course LIVE 2022

Source Incite

485 La Trobe St

Full Stack Web Attack is not an entry-level course. It&#x27;s designed to push you beyond what you thought was possible and set you on the path to develop your own workflow for offensive zero-day web research.This course was developed for web penetration testers, bug hunters and developers that want to make a switch to server-side web security research or see how serious adversaries will attack their web based code.Students are expected to know how to use web proxies and have a basic understanding of common web attack patterns as well as perform basic scripting using scripting languages such as python, PHP and JavaScript.Each of the vulnerabilities presented have either been mirrored from real zero-day or are n-day bugs that have been discovered by the author with a focus on not just exploitation, but also on the discovery.So if you want to learn how to exploit web technologies without client interaction for maximum impact, that is, remote code execution then this is the course for you.InstructorsSteven Seeley (@steventseeley) is an internationally recognized security researcher and trainer. For the last six years, Steven has reached platinum status with the ZDI and has literally found <a href="https://srcincite.io/advisories/" target="_blank" data-msys-clicktrack="0" rel="nofollow noopener noreferrer">over a 1,500 high impact and critical vulnerabilities</a>.In 2020, Steven teamed up with Chris Anastasio and <a href="https://www.youtube.com/watch?v=Frd1LVgjXas" target="_blank" data-msys-clicktrack="0" rel="nofollow noopener noreferrer">won</a> the ICS Pwn2Own competition held in Miami. Later on, Steven went on to play in Pwn2Own Vancouver in 2021 targeting Microsoft Exchange Server with an Remote Code Execution and obtained a <a href="https://youtu.be/6FYfUv1pwAg?t=5780" target="_blank" data-msys-clicktrack="0" rel="nofollow noopener noreferrer">successful (partial) win</a>. Currently Steven focuses on cloud security research with 360&#x27;s Vulnerability Research Institute.Assisting Steven is in this live training is Rocco Calvi (@TecR0c) who is an offensive security researcher with over 10 years experience and has discovered several high impact vulnerabilities impacting Microsoft Office.LocationThis training will be located in at Workspace365. The address is: 485 La Trobe Street Melbourne, Victoria.If you are arriving via car, just head straight up King Street and the building is located close to the corner of La Trobe and King Street.If you are arriving via train then just get off at the Spencer St station and walk one block up La Trobe Street.Dates &amp; TimeNovember 1st - 4th between 9am and 5pm AEST 2022.FAQsWhat must I bring into the event?<ul><li>An open mind that is ready to focus.</li><li>A gitlab.com account, you can <a href="https://gitlab.com/users/sign_up" target="_blank" data-msys-clicktrack="0" rel="nofollow noopener noreferrer">register here</a>.</li><li>Moderate or advanced skills scripting skills.</li><li>Some exposure to container based technologies and *nix operating systems.</li><li>A strong understanding of various web tech such as http(s), client/reverse proxies and browsers.</li><li>A foundational understanding of common web vulnerabilities.</li></ul>Please do not use netbooks or tablets for this course.Where can I find more information?An updated syllabus can be found <a href="https://srcincite.io/training/syllabus/" target="_blank" data-msys-clicktrack="0" rel="nofollow noopener noreferrer">here</a><a href="https://srcincite.io/training/" target="_blank" data-msys-clicktrack="0" rel="nofollow noopener noreferrer"></a> or feel free to email us at training@srcincite.io.Will this cover memory corruption vulnerabilities and exploits?No, that is beyond the scope of this training course.Where will this event be held?Live in Melbourne, venue to be determined.What&#x27;s the refund policy?A minimum of 10 people must sign up for this training to take place. Tickets will be refunded in full if this requirement is not met.

Full Stack Web Attack (FSWA) Training Course LIVE 2022

More events from Source Incite

Discover more events from Source Incite, from Science & Tech to other experiences you might love.

Still looking for the right event?

Explore all events in Melbourne and filter by date, category, and more to find the perfect fit.

Full Stack Web Attack (FSWA) Training Course LIVE 2022

More events from Source Incite

Discover more events from Source Incite, from Science & Tech to other experiences you might love.

You might also like...

Browse more events with different dates, prices, and formats to find your next great experience.

Still looking for the right event?

Explore all events in Melbourne and filter by date, category, and more to find the perfect fit.