Learn EDR Internals: Research & Development From The Masters
Power BI Fundamentals - Create visualizations and dashboards from scratch
Overview
Google, IBM & Meta Certificates – 40% Off
One plan covers every Professional Certificate on Coursera.
Unlock All Certificates
Explore a comprehensive analysis of security vulnerabilities in DataBinding mechanisms across popular web frameworks. Delve into the research conducted on top frameworks like Spring, Struts, Grails, and Ruby on Rails, uncovering critical security bugs that can lead to remote code execution. Learn about the potential risks associated with DataBinding, moving beyond the well-known Mass Assignment issue to examine the security of the mechanism itself. Gain insights into novel attack vectors and understand the implications for web application security. This 37-minute Black Hat conference talk provides valuable information for developers, security professionals, and anyone interested in web framework vulnerabilities and exploitation techniques.
Syllabus
DataBinding2Shell: Novel Pathways to RCE Web Frameworks
Taught by
Black Hat