Full Stack Web Attack (FSWA) Training Course 2022

Source Incite

Full Stack Web Attack is not an entry-level course. It&#x27;s designed to push you beyond what you thought was possible and set you on the path to develop your own workflow for offensive zero-day web research.This course was developed for web penetration testers, bug hunters and developers that want to make a switch to server-side web security research or see how serious adversaries will attack their web based code.Students are expected to know how to use web proxies and have a basic understanding of common web attack patterns as well as perform basic scripting using scripting languages such as python, PHP and JavaScript.Each of the vulnerabilities presented have either been mirrored from real zero-day or are n-day bugs that have been discovered by the author with a focus on not just exploitation, but also on the discovery.So if you want to learn how to exploit web technologies without client interaction for maximum impact, that is, remote code execution then this is the course for you.InstructorSteven Seeley (@steventseeley) is an internationally recognized security researcher and trainer. For the last six years, Steven has reached platinum status with the ZDI and has literally found <a href="https://srcincite.io/advisories/" target="_blank" data-msys-clicktrack="0" rel="nofollow noopener noreferrer">over a 1,500 high impact and critical vulnerabilities</a>.In 2020, Steven teamed up with Chris Anastasio and <a href="https://www.youtube.com/watch?v=Frd1LVgjXas" target="_blank" data-msys-clicktrack="0" rel="nofollow noopener noreferrer">won</a> the ICS Pwn2Own competition held in Miami. Later on, Steven went on to play in Pwn2Own Vancouver in 2021 targeting Microsoft Exchange Server with an Remote Code Execution and obtained a <a href="https://youtu.be/6FYfUv1pwAg?t=5780" target="_blank" data-msys-clicktrack="0" rel="nofollow noopener noreferrer">successful (partial) win</a>. Currently Steven focuses on cloud security research with 360&#x27;s Vulnerability Research Institute.FAQsWhat must I bring into the event?<ul><li>An open mind that is ready to focus.</li><li>A gitlab.com account, you can <a href="https://gitlab.com/users/sign_up" target="_blank" data-msys-clicktrack="0" rel="nofollow noopener noreferrer">register here</a>.</li><li>Moderate or advanced skills scripting skills.</li><li>Some exposure to container based technologies and *nix operating systems.</li><li>A strong understanding of various web technologies such as http(s), client/reverse proxies and browsers.</li><li>A foundational understanding of common web vulnerabilities.</li></ul>Please do not use netbooks or tablets for this course.Where can I find more information?An updated syllabus can be found <a href="https://srcincite.io/training/syllabus/" target="_blank" data-msys-clicktrack="0" rel="nofollow noopener noreferrer">here</a><a href="https://srcincite.io/training/" target="_blank" data-msys-clicktrack="0" rel="nofollow noopener noreferrer"></a> or feel free to email us at training@srcincite.io.Will this cover memory corruption vulnerabilities and exploits?No, that is beyond the scope of this training course.Where will this event be held?Online via Zoom.What&#x27;s the refund policy?A minimum of 5 people must sign up for this training to take place. Tickets will be refunded in full if this requirement is not met.

Our {communityGuidelinesLink} describe the sort of content we prohibit on Eventbrite. If you suspect an event may be in violation, you can report it to us so we can investigate.

To report other categories of prohibited or illegal content, submit {link}

Full Stack Web Attack (FSWA) Training Course 2022

More events from Source Incite

Discover more events from Source Incite, from Science & Tech to other experiences you might love.

Still looking for the right event?

Explore all online events to browse and filter by date, category, and more.

Full Stack Web Attack (FSWA) Training Course 2022

More events from Source Incite

Discover more events from Source Incite, from Science & Tech to other experiences you might love.

More Science & Tech events

Browse more Science & Tech events with different dates, prices, and formats to find your next great experience.

Still looking for the right event?

Explore all online events to browse and filter by date, category, and more.