pentesting – 44CON

Bypassing CSP via ajax.googleapis.com

June 15, 2021June 14, 2021 Nathalie 2021, 44CON Training, Content Security Policy, CSP, Dawid Czagan, pentesting, september

Content Security Policy (CSP) is the number one defensive technology in modern web applications. Many developers add ajax.googleapis.com to CSP definitions, because

2021 44CON Featured Training

Exploiting Race Conditions

April 27, 2021April 26, 2021 Nathalie 44CON Training, pentesting, training

A race condition attack is one of the most dangerous and underestimated attacks on modern web applications. It’s related to

2021 44CON News Featured Training

Live Online Training in 2021

April 12, 2021 Nathalie 2021, 44CON Training, aws, bug hunting, cloud, cybersecurity, desktop apps, fuzzing, hacking, mobile apps, pentesting, phone apps, security, threat hunting, threat modeling, training, whiteboard hacking

We are again offering Live Online Training until it is safe to return to venues and offer on-site training courses.