Difference between revisions of "San Antonio"
Michael.xin (talk | contribs) |
Michael.xin (talk | contribs) |
||
| Line 93: | Line 93: | ||
Cross-site scripting is a well-known attack vector at this point, but many people still don't understand the full risk of being vulnerable to it. BeEF is a framework that combines lots of different tools that can be useful to an attacker after finding a cross-site scripting bug in a site. The purpose of this talk is to demonstrate the potential severity of a cross-site scripting attack, leveraging BeEF to trick the user in various ways and to try to get as much useful information out of them as possible. | Cross-site scripting is a well-known attack vector at this point, but many people still don't understand the full risk of being vulnerable to it. BeEF is a framework that combines lots of different tools that can be useful to an attacker after finding a cross-site scripting bug in a site. The purpose of this talk is to demonstrate the potential severity of a cross-site scripting attack, leveraging BeEF to trick the user in various ways and to try to get as much useful information out of them as possible. | ||
| + | The slides download link: https://www.owasp.org/images/e/e1/Xss-owasp.pptx | ||
== Past Events == | == Past Events == | ||
https://www.owasp.org/index.php/San_Antonio/pastEvents | https://www.owasp.org/index.php/San_Antonio/pastEvents | ||
Revision as of 21:47, 24 March 2015
OWASP San Antonio
Welcome to the San Antonio chapter homepage. The chapter leadership team is:
Dan Cornell
Greg Anderson
Michael Xin
Charles Neill
Matt Valdes
Participation
OWASP Foundation (Overview Slides) is a professional association of global members and is open to anyone interested in learning more about software security. Local chapters are run independently and guided by the Chapter_Leader_Handbook. As a 501(c)(3) non-profit professional association your support and sponsorship of any meeting venue and/or refreshments is tax-deductible. Financial contributions should only be made online using the authorized online chapter donation button. To be a SPEAKER at ANY OWASP Chapter in the world simply review the speaker agreement and then contact the local chapter leader with details of what OWASP PROJECT, independent research or related software security topic you would like to present on.
Sponsorship/Membership
to this chapter or become a local chapter supporter.
Or consider the value of Individual, Corporate, or Academic Supporter membership. Ready to become a member? 
Local News
OWASP San Antonio - March 20th 2015
On March 20th the OWASP San Antonio Chapter is having a FREE one day, single track, conference featuring talks about secure software development, securing the SDLC and application security testing. Whether you’re an information security professional, software developer, or just interested in computer security, anyone and everyone is welcome. We have an all-star set of speakers that will be covering all aspects of managing a security program as well as in depth testing methodologies.
Map:
Full Program:
Schedule:
9:15 - 9:30
Welcome, Sign-in, Kickoff
9:30 - 10:30
Keynote
Glenn Leifheit, Principal Security Architect, Microsoft
10:30 - 11:30
Maximizing Security with Minimal Resources
Chris Maier, Principal Architect, Rackspace
11:30 - 12:45
Lunch (provided)
12:45 - 1:45
Convincing Your Management, Your Peers, and Yourself that Risk Management Doesn’t Suck
Josh Sokol, Information Security Program Owner, National Instruments
1:45 - 2:45
Automating Security Tests with Selenium
Brady Vitrano, Lead Quality Engineer, Rackspace
Charles Neill, Security Engineer, Rackspace
2:45 - 3:45
Making Security as Agile as Development: Adding DevOps and TDD to your security program
Matt Tesauro, Application Security Leader, Pearson
3:45 - 4:00
Close
OWASP San Antonio Chapter - Feb 11 2015 @ 11:30am
Come to the first OWASP San Antonio meeting of 2015. We will be having a talk on BeEF - the Browser Exploitation Framework Project and discussing plans for the rest of 2015.
Speaker: Charles Neill
Bio: Charles is a Security Developer at Rackspace, where he does application security for products developed in-house, as well as OpenStack projects and other third-party products. He also develops tools to assist with security testing.
Title: Introduction to Cross-Site Scripting with BeEF
Abstract:
Cross-site scripting is a well-known attack vector at this point, but many people still don't understand the full risk of being vulnerable to it. BeEF is a framework that combines lots of different tools that can be useful to an attacker after finding a cross-site scripting bug in a site. The purpose of this talk is to demonstrate the potential severity of a cross-site scripting attack, leveraging BeEF to trick the user in various ways and to try to get as much useful information out of them as possible.
The slides download link: https://www.owasp.org/images/e/e1/Xss-owasp.pptx
