php[tek] 2014
19 - 23 May 2014 at Sheraton Gateway Suites O’Hare

Talk comments

Greg Wilson at 22:43 on 20 May 2014

Good examples and I liked how you provided an exploitable VM to work with.

on Hacking Sites for Fun and Profit

David Stockton at 18:20 on 20 May 2014

Good talk. Tons to cover in a short time and I doubt I could do it again without additional study and reference but I am glad I went. Thank you.

on Making an iOS client for your REST API

Anonymous at 17:46 on 20 May 2014

great tutorial! thank you!

on Hacking Sites for Fun and Profit

Anonymous at 17:32 on 20 May 2014

Thanks for the great code / ;) Excellent presentation, just looking for the slides

on Hacking Sites for Fun and Profit

Bradley Coudriet at 17:30 on 20 May 2014

What a great exercise. The best defense in Web Security is to know your enemy!

This tutorial gave us a great look into the mind of hackers out there trying to hax0r our b0xen

Great job! I was really impressed with how everyone helped out in the beginning making sure everyone's VirtualBox was up and running.

Great community!

on Hacking Sites for Fun and Profit

Christian Nilsson at 16:55 on 20 May 2014

David managed to de-mystify a lot of what at first seemed like daunting things. Very good structure of the whole session with nice informative start, let us go at the perfect time, kept holding us in hand just enough and was a good sport with all comments and questions from the audience.
Finished by following through to show how each exploit could have been prevented and explained the cause of it actually being a exploit in a very informative and pedagogical matter.

Most fascinating is how well prepared he came with usb sticks having a working virtualized server all configured with a professional web site built using modern technologies for us to use on our machines. The site at first seemed impenetrable but turned out not being the case thanks to his excellent teaching.

He gave us the whole box to hang on to and promised to give us the slide deck too which would allow us to continue our learning after the session was over. I could not recommend this session more, simply brilliant!

on Hacking Sites for Fun and Profit

Jon Cantwell at 16:25 on 20 May 2014

I'm going to have nightmares about image uploads now.

Fantastic tutorial.

on Hacking Sites for Fun and Profit

Luis Cruz at 16:19 on 20 May 2014

Despite a rough start getting everyone setup with the VM, this was a fun exercise in thinking about being outside the box and finding a way in. Good hands on session to get one into the mentality of "How can someone break my sh... stuff".

on Hacking Sites for Fun and Profit