(More than) One Vulnerability in a Thousand Makes It
summary
A live exploit against a vulnerable OpenWASP app shows how a single successful command‑line injection (triggered by a crafted ping) can create files on the server and drop malware, demonstrating that a one-in-a-thousand success is enough to break an app. The presentation covers using Dynatrace RASP to block that exploit at runtime and integrating continuous runtime checks and automated blocking into CI/CD, including a TeamCity pipeline, so detection and prevention run in preprod and production.
AI-written summary · about
chapters (8)
- 0:00Vulnerability risk
- 3:16One in a thousand
- 7:40Vulnerabilities across stack
- 12:15Command line injection demo
- 17:53Bypassing protections
- 21:46Runtime self protection
- 26:03DevSecOps controls
- 28:53Q&A
related talks
26mStranger Danger: Your Attack Surface Just Got Bigger
50mStranger Danger: Your Java Attack Surface Just Got Bigger
46mLive hacking: Breaking into your Java web app
01h 30mCommon Webapp Vulnerabilities and What to Do About Them
30mHow to hack a web app?
48mCommon vulnerabilities you wish your Java app didn't have!
41mLive Hacking: Breaking into Your Web App
39mHard to Port! - A Snapshot of the Vulnerability Landscape in 2015