LASCON Courses

Build More Secure Apps with OWASP SKF and ASVS on Kubernetes

Enhance app security using OWASP SKF & ASVS on Kubernetes. Learn integration, manage ASVS requirements, and explore SKF Labs. Includes demo and GitHub repo for easy deployment on EC2 or AWS.

• YouTube
• 45 minutes
• Self-Paced
• Free Video

Scanning at Scale with OWASP ZAP - Technical Challenges and Improvements

Explore techniques for scaling OWASP ZAP scans, including technical challenges, modifications, and improvements. Learn from Probely's experience as active ZAP contributors.

• YouTube
• 53 minutes
• Self-Paced
• Free Video

A Visual Journey to Demystifying OAuth2 and OIDC - Why Do They Exist and How to Properly Use Them to Secure Your Applications

Explore OAuth2, OIDC, and related security standards through visual explanations. Learn their purposes, differences, and proper implementation for secure authentication and authorization.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

The Case for Runtime Protection

Runtime protection: inoculating apps against vulnerabilities without changing code. Explores how instrumentation hardens applications, making OWASP Top Ten harder to exploit. Discusses accuracy, performance, and impact on security culture.

• YouTube
• 51 minutes
• Self-Paced
• Free Video

Lessons Learned Building a Software Supply Chain Security Team

Insights on building a software supply chain security function, exploring the role of SBOMs and addressing challenges in implementing effective security measures.

• YouTube
• 56 minutes
• Self-Paced
• Free Video

Using API Specifications to Attack APIs

Explore API security vulnerabilities, breaches, and scanning tools. Learn to leverage API specifications for both protection and potential exploitation in this comprehensive overview.

• YouTube
• 57 minutes
• Self-Paced
• Free Video

Building Trust-Based Networks with Dime Data Format

Explore Dime, a modern data format for building trust networks and enabling secure communication. Learn its advantages over X.509 certificates and its potential for future applications.

• YouTube
• 50 minutes
• Self-Paced
• Free Video

Defense-in-Depth Engineering Techniques for Secure Software Design

Explore techniques for building resilient software, identifying overlooked vulnerabilities, and designing for incident preparedness. Learn to architect secure systems and improve incident response capabilities.

• YouTube
• 55 minutes
• Self-Paced
• Free Video

Knowing What Risks Matter and Don't in Your Open Source

Explore key findings on open-source software risks, including usage trends, vulnerability rates, and best practices. Learn to prioritize and address critical issues in application security.

• YouTube
• 42 minutes
• Self-Paced
• Free Video

The DevSecOps Playbook: A Step-by-Step Guide to Implementing DevSecOps

Comprehensive guide to implementing DevSecOps across 5 key domains. Offers practical tasks, prioritization strategies, and concrete examples for integrating security into development and operations workflows.

• YouTube
• 54 minutes
• Self-Paced
• Free Video

DSOMM from Theory to Enforcement - Applying Security in Cloud Native Environments

Explore DevSecOps Maturity Model implementation using open-source tools. Live demos showcase practical application of security controls across DSOMM stages for cloud-native environments.

• YouTube
• 40 minutes
• Self-Paced
• Free Video

Hacking JavaScript Desktop Apps with XSS and RCE

Explore techniques for auditing Electron apps, understanding XSS in desktop environments, and exploiting vulnerabilities to achieve remote code execution in JavaScript-based applications.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

Automating App Security Tests in Development with Docker

Learn to automate application security testing using Docker. Explore tools like ZAProxy, nikto, and SQLmap for continuous attack simulation in the software development lifecycle, with live demonstrations.

• YouTube
• 45 minutes
• Self-Paced
• Free Video

Hacking and Defending APIs - Red and Blue Make Purple

Comprehensive guide to API security: attack techniques, defense strategies, and best practices for both testers and defenders. Covers BOLA, authentication, data exposure, and more.

• YouTube
• 53 minutes
• Self-Paced
• Free Video

Tips and Tactics for Creating Your Own CTF Event

Learn step-by-step how to create engaging Capture-the-Flag events, from choosing categories to building challenges, with insights on crafting educational and entertaining cybersecurity competitions.

• YouTube
• 51 minutes
• Self-Paced
• Free Video