In the first part of WebAppSec trilogy we will discuss:

* Local, DOM based XSS vulnerabilities
* Blind MySQL injections using REGEXP
* LDAP, XPath, XML, CRLF injection / Cache poisoning
* Second-order injection vulnerabilities
* HTTP pollution attacks
* User enumeration methods
* CAPTCHA and its weaknesses
* Session management issues, brute force against session management
* Cross-Site Tracing attacks
* Session Fixation Attacks
* Clickjacking
* Application flooding

Where: Progressbar, Cukrova 14, Bratislava

When: 1.12 (Thursday) at 19:50