Hacking with PHP
•
1 like•423 views
Attacks occur at an alarming rate and frequency against every online application. Creating effective counter-measures takes creativity coupled with proven techniques. From DoS to password cracking to injection attacks, see actual PHP code an attacker could use to launch attacks, and learn what works and what does not to prevent attacks from succeeding. Warning: this session will include live coding and attacks on pre-approved targets, do not try without approval from target systems first. See code at https://github.com/mbniebergall/hacking-with-php
Recommended
More Related Content
Similar to Hacking with PHP
Similar to Hacking with PHP (20)
More from Mark Niebergall
More from Mark Niebergall (20)
Recently uploaded
Recently uploaded (20)
Hacking with PHP
- 1. Hacking with PHP Mark Niebergall LonghornPHP 2019 https://github.com/mbniebergall/hacking-with-php
- 2. Mark Niebergall • PHP since 2005 • Masters degree in MIS • Senior Software Engineer • Drug screening project • Utah PHP Co-Organizer • CSSLP, SSCP Certified and SME • Father, long distance running, fishing, skiing
- 3. Objective • Understand attacks • Increase project security • Implement effective countermeasures
- 6. Hacking with PHP • Risk to Resources • Threat Modeling • Types of Attacks • Countermeasures
- 8. Risk to Resources • Data • Functionality • Hardware • Source code
- 11. Threat Modeling • Identify threats - Script kiddies - Organized groups - Nation states - Curious users
- 12. Threat Modeling • Risk assessment
- 13. Types of Attacks
- 14. Types of Attacks • Ransomware • Malware • Covert data theft • Data decryption (credentials, personal, credit card, etc.) • Denial of Service (DoS)/Distributed DoS (DDoS) • Injection • Session hijacking • Cross-site scripting (XSS) • Spear Phishing • Name others?
- 15. Countermeasures
- 16. Countermeasures • Prevent attacks from being successful - Attacks are going to happen, can only reduce likelihood of success
- 18. Coding Time! • Be creative • Group input • Different attack types • How to implement countermeasures
- 19. Group Discussion • Attacks seen in the wild • Countermeasures used • PHP best practices • OSI model layers