Spring Break 2019 – Professionally Evil Application Security
Secure Ideas’ Professionally Evil Application Security (PEAS) class focuses on web and mobile application and API flaws such as the OWASP Top 10. The students will explore SamuraiWTF and various targets to learn the techniques of penetration and security testing. We will also focus on the various vulnerabilities that affect applications and web APIs. The class will teach these vulnerabilities, such as XSS, CSRF, SQL injection, and others, from both the perspective of how to find them within an application and how to defend against the attacks.
Throughout the three days, the students will reinforce the knowledge by performing hands-on exercises. These exercises lead the student through the various security issues within applications and APIs. The capstone of the PEAS class is the capture-the-flag (CTF) event on day three. This CTF is designed to simulate a real-world penetration test to allow the attendees to practice the techniques learned throughout the class.
Registration uses GoToTraining. This button will open a new window to an external site.