Taking Down Applications with Logic
Abhijeet Singh examines business logic flaws and authorization bypasses in web applications that defeat traditional security scanners.
Summary
Web Application and API Security
This talk addresses web application vulnerabilities and exploitation techniques. Topics include injection attacks, cross-site scripting, authentication bypasses, API security, and modern web framework vulnerabilities.
(AI summary — Claude Haiku)
Related talks
App Sec Village·48 min
Mehmet D. Ince
Analyzes flaws in web security controls and demonstrates exploitation methods that bypass common defensive boundaries.
Main Stage·18 min
Sho Ho
Sho Ho explores foe the release of feed over email at DEF CON 18, examining appsec and practical defenses.
Main Stage·42 min
Fyodor · David Fifield
Fyodor and David Fifield explores mastering the nmap scripting engine at DEF CON 18, examining appsec and practical defenses.