Sandhrabino

[Seasides @seasides_conf]

We are extremely delighted to announce @Bugcrowd as our silver sponsor. Bugcrowd was our first sponsor when we started seasides in 2019.
We are extremely grateful for their trust over the years. Thank you very much @davegerryjr and @murtazahafizji1 for your support.

#infosec

[Seasides @seasides_conf]

We are elated to share that Author & maintainer of @sqlmap, Miroslav Stampar (@stamparm) will be providing a training on "SQLmap for the masses & Unveiling the art of database exploitation" in Bug Bounty village at #Seasides2023
Register here : https://t.co/li2qPd44r1

#SQLmap

[Seasides @seasides_conf]

Vulnerable and outdated components (#6 of OWASP Top10) refer to third-party libraries or frameworks that have known vulnerabilities or are no longer supported by their developers.

Check out more about it in the poster attached.
Also thank our sponsor @getsquarex @vivekramac

[Bug Bounty Village @bugbountyvillag]

We are happy to announce a talk on "Getting Started into container & k8s security" by @C0ld_b00t3r a Security Engineer & Bug bounty hunter with a decade of experience in information security

Register: https://t.co/QnREyprSKG
details : https://t.co/z6ayGQFZ4F

#seaside2023 #goa

[Bug Bounty Village @bugbountyvillag]

We are extremely happy to announce a talk on "Primer into SAP Penetration testing & OWASP SAPkiln" by Alex Devassy a senior offensive security Consultant at EY

Register: https://t.co/SGfoWfY7AB
Details: https://t.co/z6ayGQFZ4F

#seaside2023 #bugbounty #infosec #cyber

[Bug Bounty Village @bugbountyvillag]

We are thrilled to announce a talk on "Exploring Application Logic: Uncovering Unusual Vulnerabilities" by Nikhil ( @niksthehacker ) #1 hacker in India at Synack Red Team & Founder of BSidesAhmedabad @Seasides2023

Register here: https://t.co/OiUzvfFMcS

#bugbounty #infosec

[Bug Bounty Village @bugbountyvillag]

We are happy to announce "Revolutionising Web Security: Mastering Same Origin Policy Bypass Methods for Dynamic Web Applications" by @armaancrockroax with years of experience in bug bounty @Seasides2023

Register here: https://t.co/tedG6esh5X
Details: https://t.co/z6ayGQFZ4F

[Seasides @seasides_conf]

Hello, All.. If those two words mesmerized you for a decade, then check out what @vivekramac is doing in his latest venture, @getsquarex
and why he supports us. With @getsquarex , privacy worries will be an issue of the past.

https://t.co/MaoaZaWnyQ

[Seasides @seasides_conf]

Thank you @dnifHQ and @shomiron

[Seasides @seasides_conf]

A broken function-level authorization essentially refers to a permission IDOR, whereby a regular user can carry out an administrator-level task.

It comes at #5 in OWASP Top10 API

Read more about it in the poster attached.
Also thank our sponsor @traceableai @jayesh_ahire1

[Seasides @seasides_conf]

We are extremely happy to announce @semgrep as our bronze sponsors. It's an honor for us when security professionals and enterprises' favorite SAST tool chooses to support us.Thank you very much Ella Morales @clintgibler @0xine

[Seasides @seasides_conf]

XML external entity injection (XXE) is a security vulnerability that allows a threat actor to inject unsafe XML entities into a web application that processes XML data.

Read more about it in the poster attached.
Also thank our sponsor @bugdiscover_ for their support to Seasides.

[Seasides @seasides_conf]

Unrestricted file upload is a vulnerability that occurs due to insufficient or improper file -type validation controls being implemented prior to files being uploaded.

Read more about it in the poster attached.

Also thank our sponsor @semgrep @clintgibler @0xinertiacreep

[Seasides @seasides_conf]

Burp Suite is amongst the most useful tools used by security enthusiasts and bug hunters.

Read more about some useful extensions of Burp Suite in the poster attached.

Also thank our sponsor Compliance Cow for their support to Seasides.

#seasides #infosec

[Seasides @seasides_conf]

Web Cache Deception is an attack in which an attacker deceives a caching proxy into improperly storing private information sent over the internet and gaining unauthorized access to that cached data.

Read more about it in the poster attached.
Also thank our sponsor @Hacker0x01

[Seasides @seasides_conf]

A server-side template injection attack (SSTI) is when a threat actor exploits a template's native syntax and injects malicious payloads into the template.

Read more about it in the poster attached.
Also thank our sponsor @jit_io
@dvdmelamed @PeledShahar for their support

[Seasides @seasides_conf]

Unrestricted access to sensitive business flows occurs when API endpoints do not restrict functionality when used excessively, exploiting gaps in business logic.

Read more about it in the poster attached.
Also thank our sponsor @DeepFactor_inc @kirankamity for their support.

[Seasides @seasides_conf]

Have you registered yet for this training on SqlMap by the author and maintainer of SqlMap himself @stamparm

Registrations are open: https://t.co/tDwUubNGCE

@bugbountyvillag

#seasides #infosec

[Seasides @seasides_conf]

Passwordless authentication can help you avoid security breaches from poor password choices, and frustration over forgotten passwords.

Read more about it in the poster attached.
Also thank our sponsor @PureIDLabs who are the leaders in the field of passwordless authentication

[Bug Bounty Village @bugbountyvillag]

We are happy to announce training on Uncovering badness - tracking and tackling domain name abuse by @pswapneel.

Register here: https://t.co/plKtnBemWl

#seasides2023 #bugbounty #bugbountyvillage #infosec #cybersecurity #bugbountytips