Presenting at OWASP AppSec Conference

Antti and I presented our revised version of "When Databases Attack" at the Secure360 conference in Minneapolis a few weeks ago.

In September, Antti Rantasaari and I delivered our presentation “Escalating Privileges through Database Trusts” at the OWASP APPSEC 2010 conference in CA.

Shares slides, Metasploit modules, and videos from the OWASP AppSec 2012 talk on abusing SQL Server trust relationships, misconfigurations, and weak defaults to reach high-value systems and data.

Secure database configurations are important. However, many database administrators fail to lock down accounts that are used by trusted services.

Since its formal recognition by the security community in 2007 on the OWASP Top Ten list, Cross Site Request Forgery (CSRF) has stepped out of the shadows and joined the ranks of vulnerability all-stars like Cross Site Scripting (XSS) and SQL injection.

SaaS providers face rising API and multi-tenant threats; regular pentesting aligned to OWASP and PTES across the SDLC reduces breach risk and supports SOC 2, ISO 27001, GDPR, and HIPAA.