OWASP Bucharest AppSec Conference 2018 Talks

Conference agenda, 26th of October
Time	Title	Speaker	Description
9:00 - 9:30 (30 mins)	Registration and coffee break
9:30 - 9:45 (15 mins)	Introduction	Oana Cornea	Introduction to the OWASP Bucharest Event, Schedule for the Day
9:45 - 10.30 (45 mins)	Tales of Practical Android Penetration Testing (Mobile Pentest Toolkit)	Alexander Subbotin	A vast number of open source tools and commercial products has been developed to support the security analysis of mobile apps. It has become a great challenge for a penetration tester to choose suitable or the best tools and the adequate pentest environment/distribution. And even when the test tools have been chosen, the problem remains that most of the tools only offer a CLI interface and that their usage can be very time consuming. In order to automatize the setup of the test environment and the common processes during a mobile pentest, the author has developed the "Mobile Pentest Toolkit" (PMT). This toolkit takes over recurring and time consuming tasks for the tester. It has a standardized user interface for the usage of locally installed security tools (and installs them on demand). An example of use is: After the tester has modified the Smali code, the generation of a valid and signed APK file only takes a few moments. Aside from that, this talk illustrates techniques for dynamic analysis and tracking of changes within the app. The goal is to present the Mobile Pentest Toolkit to an interested audience and to publish it as an open source tool.
10:45 - 11.30 (45 mins)	OWASP Top 10 with .NET Core	Andrei Ignat	We will show OWASP Top 10 and how to counter them in .NET Core
11:45 - 12.30 (45 mins)
12:30 - 13:30 (60 mins)	Lunch/Coffee Break
13:30 - 14:15 (45 mins)
14:20 - 15:05 (45 mins)
15:05 - 15:20 (15 mins)	Coffee break
15:20 - 16:05 (45 mins)
16:05 - 16:50 (45 mins)
16:50 - 17:00 (15 mins)	Closing ceremony	OWASP Bucharest team	CTF Prizes