jetlib.sec » Tags » nathan-hamiel

Authors: Nathan Hamiel Shawn Moyer
Tags: social engineering
Event: Black Hat Asia 2008

Tags:  list audio satan nathan-hamiel shawn-moyer asia black-hat social-engineering moyer  

Authors: Nathan Hamiel Shawn Moyer
Tags: social engineering
Event: Black Hat Asia 2008

Tags:  list sns satan nathan-hamiel shawn-moyer asia black-hat social-engineering moyer  

Authors: Marcin Wielgoszewski Nathan Hamiel
Tags: web application web python
Event: Black Hat USA 2010
Abstract: It seems that everything is a web application nowadays. Whether the application is cloud-based, mobile, or even fat client they all seem to be using web protocols to communicate. Adding to the traditional landscape there is rise in the use of application programming interfaces, integration hooks, and next generation web technologies. What this means for someone testing web applications is that flexibility is the key to success. The Python programming language is just as flexible as today’s web application platforms. The language is appealing to security professionals because it is easy to read and write, has a wide variety of modules, and has plenty of resources for help. This additional flexibility affords the tester greater depth than many of the canned tests that come with common tools they use on a daily basis. Greater familiarity plus flexible language equals tester win! In this presentation we introduce methods with which to create your own clients, tools, and test cases using the Python programming language. We want to put testers closer to the conditions in which they are testing for and arm them with the necessary resources to be successful. We also discuss interfacing with current tools that people commonly use for web application testing. This allows for pinpoint identification of specific vulnerabilities and conditions that are difficult for other tools to identify.

Tags:  python web application nathan-hamiel usa python-programming-language application-programming-interfaces web-hackers  

Authors: Marcin Wielgoszewski Nathan Hamiel
Tags: web application web python
Event: Black Hat USA 2010
Abstract: It seems that everything is a web application nowadays. Whether the application is cloud-based, mobile, or even fat client they all seem to be using web protocols to communicate. Adding to the traditional landscape there is rise in the use of application programming interfaces, integration hooks, and next generation web technologies. What this means for someone testing web applications is that flexibility is the key to success. The Python programming language is just as flexible as today’s web application platforms. The language is appealing to security professionals because it is easy to read and write, has a wide variety of modules, and has plenty of resources for help. This additional flexibility affords the tester greater depth than many of the canned tests that come with common tools they use on a daily basis. Greater familiarity plus flexible language equals tester win! In this presentation we introduce methods with which to create your own clients, tools, and test cases using the Python programming language. We want to put testers closer to the conditions in which they are testing for and arm them with the necessary resources to be successful. We also discuss interfacing with current tools that people commonly use for web application testing. This allows for pinpoint identification of specific vulnerabilities and conditions that are difficult for other tools to identify.

Tags:  python web application nathan-hamiel usa python-programming-language application-programming-interfaces web-hackers  

Authors: Marcin Wielgoszewski Nathan Hamiel
Tags: web application python
Event: DEFCON 18

Tags:  constricting python web nathan-hamiel web-hackers web-application  

Authors: Marcin Wielgoszewski Nathan Hamiel
Tags: web application python
Event: DEFCON 18

Tags:  video python web nathan-hamiel web-hackers web-application  

Authors: Shawn Moyer Nathan Hamiel
Tags: social
Event: Black Hat USA 2008

Tags:  list audio satan nathan-hamiel shawn-moyer usa black-hat social-networks  

Authors: Shawn Moyer Nathan Hamiel
Tags: social
Event: Black Hat USA 2008

Tags:  list satan paper nathan-hamiel shawn-moyer usa black-hat social-networks  

Authors: Shawn Moyer Nathan Hamiel
Tags: social
Event: Black Hat USA 2008

Tags:  attacking list satan nathan-hamiel shawn-moyer usa black-hat social-networks  

Authors: Shawn Moyer Nathan Hamiel
Tags: social
Event: Black Hat USA 2008

Tags:  video list satan nathan-hamiel shawn-moyer usa black-hat social-networks  

Authors: Shawn Moyer Nathan Hamiel
Tags: web application web Web 2.0 XSS CSRF
Event: DEFCON 17

Tags:  weaponizing video web nathan-hamiel shawn-moyer content-authors application-web web-web  

Authors: Shawn Moyer Nathan Hamiel
Tags: web application web Web 2.0 XSS CSRF
Event: DEFCON 17

Tags:  weaponizing audio web nathan-hamiel shawn-moyer content-authors application-web web-web