Break It to Fix It: Poking Holes in a Web App
Are you a web developer or recent computer science grad who wishes to delve into the world of cybersecurity? Don't miss this pentest demo!
Date and time
Location
Hula
50 Lakeside Avenue Burlington, VT 05401Refund Policy
Agenda
Welcome
Tool Tour (15 min, 3:30 PM - 3:45 PM)
Exploiting the Target Web App (30 min, 3:45 PM - 4:15 PM)
Mitigation and Checklist (10 min, 4:15 PM - 4:25 PM)
Q&A Session (5 min, 4:25 PM - 4:30 PM)
Networking Session (30 min, 4:30 PM - 5:00 PM)
About this event
- Event lasts 1 hour 30 minutes
- Paid venue parking
Are you a web developer, software engineer, or recent computer science grad who wishes to delve into the world of cybersecurity?
You don't want to miss this live pentest demo!
Use the EARLYBIRD promo code at checkout for $20 off -- if you are quick enough. Limited tickets available. Secure your ticket ASAP -- click on the "Get tickets" button now!
Why attend?
- 50% of data breaches start with a flaw in a web app - Imperva Research Labs, 2021.
- The cybersecurity industry needs you. There's a severe shortage of cybersecurity professionals worldwide, 2.8 million to 4.8 million professionals needed to fill that gap - World Economic Forum, 2025.
- Watch a cybersecurity expert in action -- with more than 10 years of hands-on expertise.
- Leave knowing the 3 fastest checks you can run on your own web app right away.
The facilitator (Jeremiah Onaolapo) will take you on a journey during which you'll witness the hacking of a web app live.
(Jeremiah is the founder of Allegory Cyber LLC, a cybersecurity training and consulting company located in Burlington, VT.)
What is it like to learn under Jeremiah's tutelage?
"The demos were really helpful for getting a picture of how networks operate, as well as what the consequences of a compromised network could actually mean (mitm attacks are nasty!)" - A satisfied student in Vermont's flagship university, 2024.
"His lectures were endearing, interesting, and thought-provoking" - Another delighted student in the same institution, 2024.
"Jeremiah is a great professor who expertly balances work with play. He consistently brings a friendly and approachable demeanor to the class and treats students with an appropriate degree of respect" - Yet another satisfied student in the same institution, 2024.
And there are many others who have written and said similar things!
Use the EARLYBIRD promo code at checkout for $20 off -- if you are quick enough. Limited tickets available. Secure your ticket ASAP -- click on the "Get tickets" button now!
So, what should you expect at this seminar?
You will observe three phases of the attack process. See below.
Recon phase: Mapping the target web app (OWASP Juice Shop, see below). What you'll learn: Where attackers look first, and what they look for.
Probe phase: Web requests intercepted and manipulated. What you'll learn: How tiny changes reveal big holes in the target web app.
Exploit phase: A SQL injection attack. SQL stands for Structured Query Language. What you'll learn: How to compromise the target web app.
Meet OWASP Juice Shop, the target web app. OWASP is an acronym that stands for Open Web Application Security Project. OWASP Juice Shop copyright by Bjoern Kimminich & the OWASP Juice Shop contributors 2014-2025.
Other thoughts on Jeremiah's mind: "Ethical hacking is such exhilarating fun!" Photo by Sarah Kjelleren.
Your take‑home wins
- Understand the web hacker mindset in clear terms.
- Learn the 3 fastest checks you can run on your web app right away.
- Receive our multi‑step checklist to spot security holes in your web app (to be emailed to attendees after the seminar).
Pricing
- $79 early-bird ticket (until May 19th, limited tickets). Does not include taxes and fees. Purchasing an early-bird ticket will save you $20! Subject to availability.
- $99 regular ticket otherwise. Does not include taxes and fees. Subject to availability.
- Special key partner discounts may apply (to a limited set of tickets). Selected Hula members and selected associates of the Leahy Center at Champlain College may be eligible. Subject to availability.
7-day money-back guarantee (100% satisfaction guarantee)
Your satisfaction is important to us. If you are dissatisfied with the seminar (e.g., if you don't gain at least one actionable security insight), contact us within 7 days and we will issue a full refund.
Use the EARLYBIRD promo code at checkout for $20 off -- if you are quick enough. Limited tickets available. Secure your ticket ASAP -- click on the "Get tickets" button now!
Frequently asked questions
Not at all. This session was designed to make powerful cybersecurity concepts approachable and practical at the same time. And the price? About the same as dinner at certain upscale restaurants -- except this "meal" feeds your technical curiosity and fuels your career growth.
Good question. Free info is great -- but this is live, hands-on, and facilitated by a real expert. You'll get answers to your questions, see the workflow in real time, and learn in a way pre-recorded videos just can't deliver.
Not entirely. This is a great first step, but not a full training program. Think of it as a guided tour -- not a full bootcamp.
100% safe. Everything is pre-configured in a secure sandbox environment. You'll just watch the demonstration -- no risk, no access to anything dangerous.
No. If you know what a web browser is, and understand how HTTP requests work, you'll be fine.
Nope. Just bring yourself. The facilitator will do everything live on his machine (in the secure sandbox).
Yes! We have a full Q&A session built in, and depending on the flow, the facilitator may take questions during the demonstration as well.