Modern Web Application Penetration Testing Part 2, Hash Length Extension Attacks

Thursday, 20 Feb 2020 3:30PM EST (20 Feb 2020 20:30 UTC)
Speaker: Adrien de Beaupre

We will discuss the meaning and go into the technical details of this vulnerability along with its exploitation. Message Authentication Code (MAC) is a popular way of validating if something has changed. There are a number of ways as well as hashing algorithms to do so. TL;DR use a HMAC with SHA3. Live demo! With code! Exploitable applications!

Login to Register

Related Content

Offensive Operations, Pen Testing, and Red Teaming, Open-Source Intelligence (OSINT), Penetration Testing and Red Teaming

November 16, 2023

A Visual Summary of SANS HackFest Summit

Check out these graphic recordings created in real-time throughout the event for SANS HackFest Summit 2023

Offensive Operations, Pen Testing, and Red Teaming, Penetration Testing and Red Teaming

October 4, 2023

SEC670 Prep Quiz Answers

Answers for the SEC670 Prep Quiz. For more details about the course and the quiz, please clickthrough to see the quiz article.

Jonathan Reiter

Offensive Operations, Pen Testing, and Red Teaming, Penetration Testing and Red Teaming

October 4, 2023

Take The Prerequisite SEC670 Quiz

This ten question quiz will help you in determining if you are ready to take SEC670.

Jonathan Reiter