Hackazon: Stop hacking like its 1999

on YouTube ↗55m

" summary

Hackazon claims to replace old Web 1.0 test apps with a modern vulnerable web application: a faux storefront plus a companion mobile app that talks to RESTful APIs using JSON XML GwT and AMF. Vulnerabilities are configurable vulnerability landscape per field and page, so scanners and manual pentesters must handle strict workflows and nested data formats. The builder retools scanners with a universal translator, ships an easy install wizard, and runs resets for repeatable labs; code is open source to OWASP.

AI-written summary · about

" chapters (9)

1. 0:00Start
2. 4:18Cross-Site Scripting
3. 9:30Current Web Development
4. 14:10Universal Translator
5. 16:17Swagger
6. 18:22The Vulnerable Test Apps
7. 27:15Application Workflow
8. 30:26Actionscript Messaging
9. 41:37Admin Interface

" related talks

• 37mHackademicKonstantinos Papapanagiotou · AppSecUSA 2013
• 44mHack.me: a new way to learn web application securityArmando Romeo · AppSecUSA 2013
• 27mHacking with a Heads Up DisplayDavid Scrobonia · BSidesSF 2019
• 57mEnterprise Ethical Hacking Cloud ApplicationsRohit Bhardwaj · Developer Summit 2020
• 44mHack Yourself: Intro to pentesting with ZAPMike Lehan · Dutch PHP Conference 2024
• 41mLive Hacking: Breaking into Your Web AppBrian Vermeer · GOTO Amsterdam 2022
• 30mHow to hack a web app?Asim Hussain · Render Conference 2018
• 47mLive Hacking: Breaking into Your Web AppBrian Vermeer · Heapcon 2019