Base64 Can Get You Pwned!
- Kevin Fiscus
- Saturday, March 23rd, 7:15pm - 8:15pm
There are many different types of numbering systems and related encoding including binary (base2), decimal (base10) and hexadecimal (base16). One commonly used numbering system is base64. Learn how you can use this simple encoding do bypass DLP and WAF controls, write malware to victim systems and even execute self contained cross site scripting attacks. Then understand how it is possible to detect this type of threat using freely available tools and techniques.
The following bonus sessions are open to all paid attendees at no additional cost. There are many different types of events that fall into these categories:
- SANS@Night: Evening presentations given after day courses have ended. This category includes Keynotes.
- Special Events: SANS-hosted events and other non-technical recreational offerings. This category includes, but is not limited to, Receptions and Information Tables.
- Vendor: Events hosted by external vendor exhibitors.
Friday, March 22
Saturday, March 23
Sunday, March 24
Monday, March 25
|Vendor Showcase||—||Monday, March 25th, 10:30am - 10:50am||Vendor Event|
|Vendor Showcase||—||Monday, March 25th, 12:30pm - 1:15pm||Vendor Event|
|Vendor Showcase||—||Monday, March 25th, 3:00pm - 3:20pm||Vendor Event|
|GIAC Program Overview||Paul A. Henry||Monday, March 25th, 7:00pm - 7:30pm||Special Events|
|SANS Technology Institute Open House||Paul A. Henry||Monday, March 25th, 7:30pm - 8:00pm||Special Events|