Episode 19: "IDOR, APIs, and Passwords OH My!" ft. Jullian Gerhart
War Stories6 Aug 2024

Episode 19: "IDOR, APIs, and Passwords OH My!" ft. Jullian Gerhart

This week Zac sits down with Jullian Gerhart. Jullian is a Managing Consultant at NCC Group, which specializes in application security and application security pentesting. Jullian is also a contributor to the Application Defense Alliance (https://appdefensealliance.dev/) working to create a standardized framework for securing applications in the Google Play and Apple App Stores. Zac and Jullian discuss the current state of application security, their favorite web application security vulnerability (LOVE LIVE IDOR), and we get a great story from Jullian about compromising extremely sensitive information from an unsecured API.


Produced www.sevnx.com


CyberCoffee

drinkcybercoffee.com

Use promo code WAR10 to save 10%

Det här avsnittet är hämtat från ett öppet RSS-flöde och publiceras inte av Podme. Det kan innehålla reklam.

Avsnitt(22)

Episode 22: "Interview with a Cyborg" ft. Len Noe

Episode 22: "Interview with a Cyborg" ft. Len Noe

This week, Zac dials in with Len Noe, the world's first "augmented ethical hacker" (of course by that... we mean CYBORG!). Len has implanted 10 microchips between his elbows and fingers, which he can ...

11 Sep 202459min

Episode 21: "Hacking Apple" ft. Mike Piekarski

Episode 21: "Hacking Apple" ft. Mike Piekarski

This week, Zac sits down with Mike Piekarski. Mike is a bug bounty specialist, penetration tester, and solutions architect. He is also the founder of Breach Craft (breachcraft.io), a boutique cybersec...

27 Aug 202456min

Episode 20: "The Art of Deception" ft. Faisal Tameesh

Episode 20: "The Art of Deception" ft. Faisal Tameesh

This week, Zac sits down with Faisal Tameesh. Faisal is a senior red team operator at NVIDIA and a "hacker of all trades" with experience in software development, pentesting, red teaming, social engin...

16 Aug 202450min

Episode 18: "Cars and Cyber" ft. Brett DeWall

Episode 18: "Cars and Cyber" ft. Brett DeWall

This week, Zac sits down with his longtime friend Brett DeWall. Brett is a Staff Specialist at White Oak Security (CyberAdvisors). He is a pentester, red teamer, bug bounty hunter, and security resear...

25 Juli 202430min

Episode 17: "Hey Hoang, umm Cylance is on the Phone..." ft. Hoang Bui

Episode 17: "Hey Hoang, umm Cylance is on the Phone..." ft. Hoang Bui

This week, Zac sits down with Hoang Bui. Hoang specializes in reverse engineering, while dabbling in penetration testing and red teaming. Zac and Hoang discuss the levels of abstraction and different ...

18 Juli 202432min

Episode 16: "Yea, we just stole half a million dollars" ft. Shelby Spencer

Episode 16: "Yea, we just stole half a million dollars" ft. Shelby Spencer

This week, Zac sits down with Shelby Spencer. Shelby is a developer turned red teamer who has worked on some of the most elite teams in the offensive security world. Zac and Shelby discuss the breakdo...

11 Juli 202445min

Episode 15: "The story of Invoke-Shellcode" ft. Matt Graeber

Episode 15: "The story of Invoke-Shellcode" ft. Matt Graeber

In this special episode of War Stories, Zac sits down with one of his heroes, Matt Graeber! Matt is the Director of Threat Research at Red Canary. Matt is known for his expertise in threat research an...

3 Juni 202451min

Populärt inom Teknik

uppgang-och-fall
market-makers
rss-laddstationen-med-elbilen-i-sverige
skogsforum-podcast
elbilsveckan
 och-bilen-gar-bra
bli-saker-podden
rss-uppgang-och-fall
natets-morka-sida
rss-veckans-ai
rss-en-ai-till-kaffet
developers-mer-an-bara-kod
hej-bruksbil
rss-technokratin
rss-milpodden
solcellskollens-podcast
rss-it-sakerhetspodden
algoritmen
ai-sweden-podcast
rss-fabriken-2