Information Security Research Association

Loading...

Workshop

Whitebox Web Hacking:
From Code Review to Exploitation

Register Now

Workshop Description

A Whitebox Approach to Web Application Hacking is a hands-on workshop focused on identifying and exploiting vulnerabilities through source code review in Python web applications. Participants will learn how insecure coding patterns lead to real-world vulnerabilities and how attackers chain multiple bugs together to achieve deeper compromise.

The training covers practical exploitation techniques, vulnerability discovery methodologies, and common developer mistakes found in modern web applications.

Training Table of Contents

Duration: 10:00 AM - 4:00 PM (5 Hours)

Introduction to Whitebox Web Hacking

 

SQL Injection

 

Arbitrary File Read (path.join bypass)

 

SSRF (Server-Side Request Forgery)

 

Pickle Deserialization

 

Server-Side Template Injection (SSTI)

 

File Write Vulnerabilities

ZipSlip, Symlink Exploitation

Command Injection

 

Vulnerability Chaining

File Write → RCE

Secure Coding & Mitigations

 

Prerequisites

  • A laptop with a Linux operating system preferred
  • A code editor installed (VS Code/Sublime/Vim/etc.)
  • Python installed
  • Basic understanding of web applications and HTTP is good to have

Trainer(s)

Alfin Joseph

Security Engineer
CRED

Arun Krishnan

Security Engineer
Scapia

          

Let’s connect and build a stronger cybersecurity community together!

Venue

  • TinkerHub Foundation,
    21/258, Cusat.P.O, Punnekkattumoola
    Seaport - Airport Rd, Vidya Nagar Colony
    Thrikkakara, Kalamassery, Kochi
    Kerala 682022, India

Ticketing Partner