Exploit, Detect, Block: A Live Workshop on Application Attack Defense

📚 Workshop Overview

Join us for an engaging workshop titled Exploit, Detect, Block focused on defense against application attacks! 🚀

💡 Abstract

In today's digital landscape, most application attacks succeed not due to a lack of tools, but because existing tools are often examining the wrong layers. Our workshop addresses this gap directly by conducting live attack simulations and observing the responses in real-time.

Participants will systematically work through a series of live exploits on vulnerable applications, including server-side template injection, unsafe deserialization, OGNL injection, and SQL injection patterns from genuine CVEs like MOVEit. This hands-on experience will allow attendees to observe detection and blocking scenarios, understanding the complete attack path and how to leverage mechanisms like the Linux Security Module (lsm) to thwart attacks.

The ultimate aim is to cultivate a practitioner-level intuition regarding application-layer telemetry, glean insights from runtime behavior, and identify key points in the kill chain where runtime controls can intervene effectively.

🗓 Schedule

• 5:30 PM – 6:00 PM: Networking 🤝
• 6:00 PM – 8:00 PM: Workshop Session 💻
• 8:00 PM – 8:30 PM: Additional Networking and Q&A ❓

🎤 Featured Speaker

Jeff Bayntun
A Senior Solutions Engineer at Oligo Security with extensive experience in runtime and supply chain security. When he’s not dissecting application behavior, you can find him playing pickleball or enjoying paddleboarding in Vancouver, BC.

🔗 Thanks to our Sponsor: Oligo

Learn more about Oligo Security

🙌 Code of Conduct

Your participation in this workshop is highly valued, and we are committed to fostering a welcoming community at OWASP. If you have any feedback or concerns, please reach out to our chapter leaders. For more details on our policies, visit: OWASP Anti-Harassment Policy

🤝 Sponsorship Opportunities

Interested in sponsoring? Please contact us at sponsorship.la@owasp.org

Location: HiveWatch HQ
Ticket Link: Reserve your spot