Loading…
This event has ended. View the official site or create your own event → Check it out
This event has ended. Create your own
View analytic
Friday, July 1 • 10:20 - 11:05
The Top 10 Web Hacks of 2015

Sign up or log in to save this to your schedule and see who's attending!

Every year the security community produces a stunning number of new Web hacking techniques that are published in various white papers, blog posts, magazine articles, mailing list emails, conference presentations, etc. Within the thousands of pages are the latest ways to attack websites, Web browsers, Web proxies, and their mobile platform equivalents. Beyond individual vulnerabilities with CVE numbers or system compromises, we are solely focused on new and creative methods of Web-based attack. Now in its ninth year, the Top 10 Web Hacking Techniques list encourages information sharing, provides a centralized knowledge base, and recognizes researchers who contribute excellent work. 

This talk will be a summary of the Top 10 new Web Hacking Techniques that were put out in 2015. The list of candidates is community sourced and voted upon. The list gets trimmed down from between 50-100 to 15 in no order. That list of 15 techniques that get the most votes will go on to the panel of expert judges. They will pick the Top 10 and order them based on a group consensus after reviewing all the research. This talk will go through these 10 techniques and highlight the important points of what was done in the research and how to protect yourself or your organization if applicable. 

We will do a technical deep dive and take you through the Top 10 Web Hacks of 2015 as picked by an expert panel of judges.

Speakers
avatar for Jonathan Kuskos

Jonathan Kuskos

Senior Application Security Engineer, WhiteHat Security
@JohnathanKuskos is a Manager for WhiteHat Security where he is charged with the expansion of their Belfast, Northern Ireland Threat Research Center. After personally hacking hundreds of web applications over several years he moved into a managerial role so that he could contribute to mentoring younger security engineers. Johnathan is extremely passionate about teaching and sharing the security knowledge he’s attained. He’s also an active bug... Read More →


Friday July 1, 2016 10:20 - 11:05
Room C (Tiziano Ballroom Sec. 2)