Topic

Web AppSec talks at BSides

441 talks tagged Web AppSec from 88 chapters of BSides events worldwide.

It's the Little Things

Ben Sadeghipour

BSides PDX · 2018

Technical Web AppSec Intermediary Red Technical Deep-dives Talk

Open →2019-02

Bug Bounty on Steroids

BSides Ahmedabad · 2023

Technical Vulnerability Research Web AppSec Intermediary Red Talk

Open →2023-02

Bug Bounty Recon The Right Way

Khalil A. Lemtaffah

BSides Budabest · 2022

Technical OSINT Web AppSec Intermediary Red Talk

Open →2023-06

Passive-ish Recon Techniques

BSides Leeds · 2018

Technical Web AppSec Intermediary Red Talk

Open →2018-02

The Power of Recon

BSides Ahmedabad

Technical OSINT Vulnerability Research Web AppSec Red Talk

Open →2024-05

No More XSS: Deploying CSP with nonces and strict-dynamic

BSidesSF · 2018

Technical Web AppSec Talk

Open →2018-04

Art of VirusTotal Hacking

BSides Ahmedabad · 2025

Technical Web AppSec Talk

Open →2025-04

The Art of Authentication Bypass

Abdallah AL Mohameed

BSides Ahmedabad · 2025

Technical Web AppSec Red Talk

Open →2025-04

Web security is fun (or how I stole your Google Drive files)

BSides Tallinn · 2024

Technical Vulnerability Research Web AppSec Talk

Open →2024-10

Offensive Javascript Techniques for Red Teamers

Dylan Ayrey Christian Frichot

BSidesSF · 2019

Technical Web AppSec Red Talk

Open →2019-03

AutoRepeater: Automated HTTP Request Repeating With Burp Suite

BSidesROC · 2018

Technical Tooling Web AppSec Demo Talk

Open →2018-04

Performing JavaScript Static Analysis by Lewis Ardern

BSides Leeds · 2018

Technical Web AppSec Talk

Open →2018-01

How to Write Your First Nuclei Template

BSides Ahmedabad

Technical Vulnerability Research Web AppSec Talk

Open →2023-02

Automating Web Application Bug Hunting

Jerry Gamblin Jonathan Cran

BSidesSF · 2019

Technical OSINT Vulnerability Research Web AppSec Talk

Open →2019-03

Committing CSS Crimes for fun and profit

BSides Tallinn · 2025

Technical Web AppSec Talk

Open →2025-10

DOM Based Angular Sandbox Escapes

BSides Manchester · 2017

Technical Vulnerability Research Web AppSec Advanced Red Technical Deep-dives Talk

Open →2017-08

SWF Seeking Lazy Admin for Cross-Domain Action

BSides DC · 2014

Technical OWASP Web AppSec Talk

Open →2014-10

Source Code Security Audit Speed Run

Eldar Marcussen

BSides Canberra · 2019

Technical Vulnerability Research Web AppSec Talk

Open →2019-05

Web Apps: APIs’ Nightmare

BSides Ahmedabad

Technical OWASP Web AppSec Intro Talk

Open →2024-05

Client-Side to Critical

Satyam Gothi Kuldeep Pandya

BSides Ahmedabad · 2025

Technical Vulnerability Research Web AppSec Red Talk

Open →2025-05

Inside Magecart: Their Web Skimming Tactics Revealed

BSides London · 2019

Technical Malware Analysis Threat Intel Web AppSec Intermediary Talk

Open →2019-06

Tale of Chaining Bugs for Account Takeover

BSides Ahmedabad · 2022

Technical Vulnerability Research Web AppSec Red Case Studies and Incidents Analysis Talk

Open →2023-02

Yassine Aboukir: Bug Bounty, Authentication Vulnerabilities, and Hacker Collaboration

Yassine Aboukir

BSides Ahmedabad · 2023

Career Vulnerability Research Web AppSec Red Talk

Open →2023-02

Exploiting esoteric Android vulnerability

BSides Ahmedabad · 2021

Technical Web AppSec Intermediary Red Workshop

Open →2022-04

John Heasman - Doing More in AppSec by Doing Less

BSides Knoxville

Technical Threat Modeling Web AppSec Blue Methodology Talk

Open →2024-09

You can't make web app security easy, but you can make it simple

BSides DC · 2015

Technical Web AppSec Talk

Open →2015-12

OWASP Top 10 Like I'm Five: From A Bug Bounty Hunter's Perspective

BSides Budabest · 2019

Technical OWASP Web AppSec Intro Talk

Open →2019-06

Web Application Vulnerability Scanners: An Introduction & Discussion on Their Limitations

BSides Cape Town · 2019

Technical Vulnerability Research Web AppSec Talk

Open →2019-12

XS Leaks: Client Side Attacks In A Post XSS World

Zeyu Zayne Zhang

Technical Web AppSec Talk

Open →2024-02

Till REcollapse: fuzzing the web for mysterious bugs

André Baptista

BSides Lisbon · 2022

Technical Web AppSec Talk

Open →2022-12

PHP Execute After Redirect to SQL Injection

BSides Ahmedabad · 2022

Technical Vulnerability Research Web AppSec Red Demo

Open →2023-02

Journey to Command Injection: Hacking the Lenovo ix4-300d

BSidesSF · 2019

Technical Hardware Hacking Vulnerability Research Web AppSec Intermediary Red Demo

Open →2019-03

Playing with Fake Emails for Fun and Profit

BSides Ahmedabad · 2022

Technical Vulnerability Research Web AppSec Red Case Studies and Incidents Analysis Talk

Open →2023-02

Navigating Bug Bounties: From NAs to P1s

Animesh Acharya

BSides Canberra · 2025

Career Vulnerability Research Web AppSec Red Case Studies and Incidents Analysis Talk

Open →2025-11

Behind Enemy Lines by Ido Rozen

BSides TLV · 2022

Research Malware Analysis Threat Intel Web AppSec Talk

Open →2022-07

AI Red Teaming for Artificial Dummies

Bryson Loughmiller

BSides SLC · 2025

Technical AI Security Web AppSec Red Talk

Open →2025-06

Not All Vulnerabilities Are The Same

BSides Canberra · 2025

Research Vulnerability Research Web AppSec Keynote

Open →2025-12

BSidesSF 2021 - Offensive Javascript Techniques for Red Teamers (Dylan Ayrey • Christian Frichot)

Dylan Ayrey Christian Frichot

BSidesSF · 2021

Technical Web AppSec Red Talk

Open →2021-03

Malvertising: Under The Hood

BSides Manchester · 2017

Technical Malware Analysis Threat Intel Web AppSec Talk

Open →2017-08

The Dark Side of DeFi

Rudra Singh Arbaz Hussain

BSides Ahmedabad · 2022

Technical Smart Contract Security Vulnerability Research Web AppSec Intermediary Technical Deep-dives Talk

Open →2023-02

Automated Security Scanning of GraphQL APIs with Burp

BSides Toronto · 2022

Technical Vulnerability Research Web AppSec Demo Talk

Open →2022-10

Would I Even Be Here If It Wasn't for the Internet?

Ben Sadeghipour

BSides Knoxville · 2022

Community Career & Soft Skills Web AppSec Keynote

Open →2022-05

A Less Known Attack Vector: Second Order IDOR Attacks

BSides Athens · 2020

Technical OWASP Web AppSec Red Talk

Open →2020-06

Content Security Policy — Lessons Learned at Yahoo

Binu Ramakrishnan

BSides DC · 2015

Technical Web AppSec Case Studies and Incidents Analysis Talk

Open →2015-11

Continuous Security Testing in a DevOps World

Stephen de Vries

BSides London · 2014

Technical DevSecOps Web AppSec Demo Talk

Open →2014-05

The Next Generation of Web Exploits: From Cache Poisoning to Multi-Layer Fingerprinting

Bsides CT · 2025

Technical Vulnerability Research Web AppSec Empirical Research Technical Deep-dives Talk

Open →2025-12

Hacking a Hackathon for Fun and Profit

Alexei Kojenov Alex Ivkin

BSides PDX · 2018

Technical Supply Chain Security Vulnerability Research Web AppSec Red Case Studies and Incidents Analysis Talk

Open →2018-03

How to Hack OAuth

BSides PDX · 2019

Technical Web AppSec Intermediary Case Studies and Incidents Analysis Talk

Open →2019-11

Knock Knock. Race Condition. Who's There?

BSides Cape Town · 2025

Technical Vulnerability Research Web AppSec Talk

Open →2025-12

Fixing XSS with Content Security Policy

Ksenia Dmitrieva

BSides DC · 2015

Technical OWASP Web AppSec Talk

Open →2015-12

Bye-Bye False Positives: Using AI to Improve Detection

BSidesSF · 2019

Technical Web AppSec Blue Talk

Open →2019-03

Finding & Exploiting Client-Side Prototype Pollution in the Wild

BSides Ahmedabad · 2021

Technical Vulnerability Research Web AppSec Red Case Studies and Incidents Analysis Methodology Talk

Open →2022-02

BSides Oslo 2025 — Live Stream

BSides Oslo 2025

Technical Malware Analysis Reverse Engineering Social Engineering Threat Intel Web AppSec Intermediary Red+1

Open →2025-10

From Zero To SSRF To RCE And Back Again by Tom Cope

BSides Basingstoke · 2022

Technical Web AppSec Talk

Open →2022-07

CSRFT, A Toolkit for CSRF Vulnerabilities

BSides London · 2014

Technical Tooling Web AppSec Demo Talk

Open →2014-05

Understanding IRSF Fraud: Protecting Against SMS Exploitation

Vien Van Senthil Sivasubramanian

BSidesSF · 2025

Technical Detection Engineering Threat Intel Web AppSec Talk

Open →2025-10

Payload Delivery Networks - Abusing CDNs to bypass WAF and DDoS protections

BSides Canberra · 2024

Technical Web AppSec Talk

Open →2024-10

Mastering Bug Bounty: The Secrets of hunting bugs by Devansh Chauhan

Devansh Chauhan

BSides Noida · 2024

Career Vulnerability Research Web AppSec Intro Talk

Open →2024-11

Java Serialization Attacks

BSides Peru · 2017

Technical Vulnerability Research Web AppSec Technical Deep-dives Talk

Open →2017-07

Subdomain Takeovers

BSides Newcastle · 2022

Technical Vulnerability Research Web AppSec Red Talk

Open →2022-09

reNgine: An Automated Reconnaissance Framework

BSides Cyprus · 2021

Technical Web AppSec Red Demo

Open →2022-06

BSides Noida : Day - 1

Fardeen Ahmad Sourav Kumar Kavisha Sheth Philippe Humeau

BSides Noida · 2021

Technical Cloud IAM Vulnerability Research Web AppSec Talk

Open →2021-08

JWTs And Why They Suck

BSides London · 2022

Technical Cryptography Web AppSec Talk

Open →2022-01

SQL Injection — omówienie i prewencja w Django

BSides Warsaw · 2019

Technical Web AppSec Talk

Open →2019-10

Static Code Analysis, from Source to Sink

BSides Manchester · 2015

Technical Vulnerability Research Web AppSec Talk

Open →2015-09

Hacking Companies For Internet Glory While Not Dying In A Sarlacc Pit

BSides Leeds · 2019

Technical OSINT Vulnerability Research Web AppSec Red Talk

Open →2019-01

Using Common Attack Database and Intent Clustering to protect websites, mobile apps and APIs

Paulina Cakalli

BSides Prishtina

Technical Web AppSec Talk

Open →2023-05

A Two-part Saga: Continuing the Journey of Hacking Malware C2s

Vangelis Stykas

BSides Prague · 2024

Technical Malware Analysis Vulnerability Research Web AppSec Red Case Studies and Incidents Analysis Technical Deep-dives Talk

Open →2024-04

How to beat application DDoS attacks with CrowdSec & Cloudflare

Klaus Agnoletti

BSides Barcelona

Technical Web AppSec Talk

Open →2022-01

Hacking with a Heads Up Display

David Scrobonia

BSidesSF · 2019

Technical Tooling OWASP Web AppSec Talk

Open →2019-03

BADPDF: Stealing Windows Credentials via PDF Files

Ido Solomon Adi Ikan

BSidesSF · 2019

Technical Network Security Vulnerability Research Web AppSec Red Technical Deep-dives Talk

Open →2019-03

Attacking GraphQL: A Guide for Penetration Testers

BSides Cape Town · 2025

Technical Vulnerability Research Web AppSec Red Talk

Open →2025-02

Build Hybrid Mobile Apps Like a Security Pro

BSides Las Vegas · 2023

Technical Mobile Security Web AppSec Talk

Open →2023-08

Anyone Can Hack APIs: A Crash Course For Pentesters And Bug Bounty Hunters

BSides London · 2025

Technical Vulnerability Research Web AppSec Red Talk

Open →2026-03

Web Application Exploit 101: Breaking Access Control and Business Logic

Tomohisa Ishikawa

BSides Philly · 2017

Technical OWASP Web AppSec Red Talk

Open →2017-08

BSidesSF 2020 - The Voight-Kampff Test for Discovering Vulnerabilities (Vanessa Sauter)

BSidesSF · 2020

Technical Web AppSec Talk

Open →2020-03

Practical Serialization Attacks

BSides Manchester · 2017

Technical Reverse Engineering Vulnerability Research Web AppSec Advanced Red Case Studies and Incidents Analysis Technical Deep-dives+1

Open →2017-08

What We Can Learn from Google's Fight with Phishing

BSidesSF · 2018

Research Web AppSec Case Studies and Incidents Analysis Empirical Research Talk

Open →2018-04

BSidesSF 2022 - JavaScript Obfuscation - It’s All About the P-a-c-k-e-r-s (Or Katz)

BSidesSF · 2022

Technical Supply Chain Security Web AppSec Talk

Open →2022-07

The Art of Compromising C2 Servers

Vangelis Stykas

BSides Berlin · 2023

Technical Malware Analysis Reverse Engineering Web AppSec Advanced Red Talk

Open →2024-01

Hidden Networks Pivoting: Redefining DNS Rebinding Attack

Tomer Zait Nimrod Levy

BSides Las Vegas · 2019

Technical Network Security Vulnerability Research Web AppSec Advanced Red Talk

Open →2019-10

Introduction to OWASP Juice Shop

Tim Corless-Carter

BSides Manchester · 2019

Technical OWASP Vulnerability Research Web AppSec Intro Red Demo

Open →2019-09

EmailShell: A War Story On Leveraging Server Side Template Injection (SSTI) To Hack Into GCP

BSides London · 2025

Technical Vulnerability Research Web AppSec Red Case Studies and Incidents Analysis Talk

Open →2026-03

Security OAuth 2.0

Jonathon Brookfield Fraser Winterborn

Technical Web AppSec Talk

Open →2018-01

Hook, Line, and Tinker: A Dive into Phishing Campaign Sites

BSidesSF · 2024

Technical OSINT Threat Intel Web AppSec Intermediary Case Studies and Incidents Analysis Talk

Open →2024-07

Decoding GraphQL: How to Map Hidden Vulnerabilities

Antoine Carossio Tristan Kalos

BSidesSF · 2025

Technical Web AppSec Talk

Open →2025-06

Attacking Authentication in Web Applications - Jake Miller

BSides SATX · 2018

Technical Web AppSec Red Talk

Open →2018-07

Uncommon And Advanced Techniques For Account Takeover Attacks by Ayoub Safa

Technical Vulnerability Research Web AppSec Red Case Studies and Incidents Analysis Talk

Open →2023-07

Empowering Junior Testers: Strategies For Uncovering Critical Vulns In Web Applications

Technical Web AppSec Talk

Open →2024-09

Como Hackear um Banco sem Sair do seu Quarto?

Arthur Aires Matheus Wreck Gustavo Oliveira

BSides São Paulo · 2025

Technical War Stories Reverse Engineering Vulnerability Research Web AppSec Advanced Red Talk

Open →2025-06

HTTP Security Headers: A Technology History Through Scar Tissue

Benjamin Hering

BSidesSF · 2019

Technical Web AppSec Talk

Open →2019-03

Entomology 101: Finding, Studying, and Exploiting Bugs

Louis Nyffenegger

BSides Canberra · 2020

Technical Vulnerability Research Web AppSec Talk

Open →2020-07

XXE for Dummies

BSides PDX · 2019

Technical OWASP Web AppSec Intro Demo Talk

Open →2019-11

Secure Designs, UX Dragons, Vuln Dungeons

Mike Shema Kalyani Pawar Jack Cable

BSidesSF · 2025

Technical Threat Modeling Web AppSec Panel

Open →2025-06

THICC Clients: Reverse Engineering Your Way To Application Admin

BSides London · 2025

Technical Reverse Engineering Web AppSec Red Talk

Open →2026-03

Google Pay, Drug Bots, & SIM Swaps: How Old Leaks Power New Attacks

Sarit Yerushalmi Ron Masas

BSides London · 2025

Research Technical OSINT Social Engineering Vulnerability Research Web AppSec Advanced Case Studies and Incidents Analysis+2

Open →2026-03

Insecurity protocols: an overview of modern authentication

BSidesSF · 2024

Technical Cryptography Web AppSec Talk

Open →2024-07

Layers of Cloud: Azure and the Mishandling of Secrets

BSides Toronto · 2022

Technical Cloud IAM Web AppSec Case Studies and Incidents Analysis Talk

Open →2022-10

Secure Browser and Browser Isolation 101

BSides Vancouver · 2022

Technical Network Security Web AppSec Talk

Open →2022-07

Robots.txt - There's gold in them thar files

BSides Peru 2015

Technical OSINT Web AppSec Talk

Open →2015-06

View all 441 talks tagged Web AppSec →