AppSec Village

**Context Profile for AppSec Village**

1. **Organization Mission & Cause:**
   AppSec Village is dedicated to advancing application security knowledge and practices. Their mission is to create a collaborative environment where security professionals, enthusiasts, and newcomers can learn, share, and grow. They focus on fostering a strong community around application security to enhance the overall security posture of applications and systems globally.

2. **Type of Activities:**
   - **Events:** AppSec Village organizes workshops, talks, and interactive sessions, particularly at major conferences like DEF CON.
   - **Community Programs:** They run volunteer-driven initiatives to engage and educate the community.
   - **Fundraising Campaigns:** Initiatives like the "Super Fan" campaign encourage community support through exclusive perks and merchandise.

3. **Tone of Voice:**
   The tone is friendly, engaging, and community-focused. They use an informal and enthusiastic style to connect with their audience, emphasizing inclusivity and collaboration. The language is accessible and often includes calls to action that are both inviting and motivating.

4. **Emoji Usage:**
   AppSec Village frequently uses emojis in their communications to add a playful and approachable element. Commonly used emojis include 🌞, 🔥, 🎉, 📣, 💜, and 🤗, which help convey excitement and a sense of community.

5. **Key Facts:**
   - **Founding Info:** While specific founding details are not provided, the organization is clearly established within the cybersecurity community, particularly associated with DEF CON.
   - **Scale & Impact:** They have a significant presence with multiple forms and email campaigns, indicating active engagement with their audience.
   - **Volunteer Info:** The organization is entirely volunteer-driven, highlighting the importance of community involvement in their operations.

6. **Writing Guidelines:**
   - **Style:** Use a conversational and inclusive tone. Engage the audience with direct calls to action and emphasize community involvement.
   - **Structure:** Incorporate bullet points and headings for clarity, especially when listing benefits or event details.
   - **Language:** Use simple, clear language that is accessible to both technical and non-technical audiences. Maintain a positive and encouraging tone.
   - **Emojis:** Use emojis to enhance communication, ensuring they align with the message's tone and context.

By focusing on these elements, AI-generated content can effectively align with AppSec Village's mission and communication style, fostering a stronger connection with their audience.

LXCL:Grants entry to the workshop.

Classroom Admission

LXCL:As seats become available we will contact you.

Waitlist

Modern attackers aren&rsquo;t waiting for CVEs.They&rsquo;re quietly mapping your apps and APIs, uncovering unintended exposures, and slipping past defenses. Don&rsquo;t just react, anticipate. This workshop pulls back the curtain on the modern attacker&rsquo;s playbook. You&rsquo;ll learn how adversaries extract intelligence from exposed metadata clues hiding in plain sight. Then, we&rsquo;ll dive into crafting stealthy, context-aware payloads designed to bypass detection and exploit subtle implementation flaws.Through real-world examples and guided exercises, you&rsquo;ll learn to identify these patterns, recognize evasions, and build resilient detection and prevention strategies. Takeaways:<ul fr-original-style="" style="box-sizing: inherit;"><li fr-original-style="" style="box-sizing: inherit;">Early-stage recon via api access, information disclosure through common hardening</li><li fr-original-style="" style="box-sizing: inherit;">State of the art evasion techniques with our free, open-source tool Obfuskit</li><li fr-original-style="" style="box-sizing: inherit;">Normalization and encoding and adversarial techniques to subvert pathing, routing, and authentication</li><li fr-original-style="" style="box-sizing: inherit;">Step up your defensive game against these attacks</li></ul> PREREQUISITESWhat you should know:&nbsp;<ul fr-original-style="" style="box-sizing: inherit;"><li fr-original-style="" style="box-sizing: inherit;">A basic understanding of WAFs and how they work (e.g., signature-based rules, anomaly detection).</li><li fr-original-style="" style="box-sizing: inherit;">Familiarity with common web attacks (such as XSS, SQLi, command injection) and how they&rsquo;re typically detected.</li><li fr-original-style="" style="box-sizing: inherit;">Awareness of input validation and sanitization mechanisms in web applications.</li></ul>What you should have ready: &nbsp;<ul fr-original-style="" style="box-sizing: inherit;"><li fr-original-style="" style="box-sizing: inherit;">Operating System</li><li fr-original-style="" style="box-sizing: inherit;">Linux or macOS host machine</li><li fr-original-style="" style="box-sizing: inherit;">On Windows, use WSL (Windows Subsystem for Linux) for compatibility Linux or Mac Os host. If using windows try installing WSL.</li><li fr-original-style="" style="box-sizing: inherit;">Docker Engine installed and running</li><li fr-original-style="" style="box-sizing: inherit;">You may use Colima, Rancher Desktop, or any Docker-compatible engine</li><li fr-original-style="" style="box-sizing: inherit;">Postman Desktop App (for testing APIs with obfuscated payloads)</li><li fr-original-style="" style="box-sizing: inherit;">Burp Suite (Community or Pro edition)</li><li fr-original-style="" style="box-sizing: inherit;">Git CLI (git installed and available in terminal)</li></ul>

Hi <span contenteditable="false" data-custom-variable="{{firstname}}" fr-original-class="fr-deletable styled-tag-chip" fr-original-style="" style="background-color: rgb(248, 248, 255); border: 1px solid rgb(191, 191, 255); border-radius: 4px; color: rgb(42, 42, 196); padding: 1px 8px; font-size: 11px; display: inline-block; margin: 0px; overflow-wrap: anywhere; user-select: none; box-sizing: inherit;">First name, Thank you for registering for the AppSec Village @ DEF CON 33 Workshop: AppSec in the Shadows: Adversarial Tradecraft in App and API Defenses.&nbsp; All workshops will take place in the AppSec Village Classroom which can be found in the AppSec Village, Hall 2, of the LVCC West Hall on Level 1.&nbsp; Seats are in high demand, if you are unable to make the workshop, please let <a fr-original-style="" href="mailto:liora@appsecvillage.com" rel="noopener noreferrer" style="text-decoration-color: initial; user-select: auto; box-sizing: inherit;" target="_blank">liora@appsecvillage.com</a> know so your spot can be reallocated. If you have registered for a Waitlist ticket, we will notify you via email/phone should a spot become available. Please pay attention to the workshop prerequisites so you come prepared. What you should know:&nbsp;<ul fr-original-style="" style="box-sizing: inherit;"><li data-end="160" data-start="59" fr-original-style="" id="isPasted" style="box-sizing: inherit;">&nbsp;basic understanding of WAFs and how they work (e.g., signature-based rules, anomaly detection).</li><li data-end="275" data-start="161" fr-original-style="" style="box-sizing: inherit;">Familiarity with common web attacks (such as XSS, SQLi, command injection) and how they&rsquo;re typically detected.</li><li data-end="356" data-is-last-node="" data-start="276" fr-original-style="" style="box-sizing: inherit;">Awareness of input validation and sanitization mechanisms in web applications.</li></ul> What you should have ready: &nbsp;<ul fr-original-style="" style="box-sizing: inherit;"><li data-end="238" data-start="73" fr-original-style="" id="isPasted" style="box-sizing: inherit;">Operating System<ul data-end="238" data-start="96" fr-original-style="" style="box-sizing: inherit;"><li data-end="127" data-start="96" fr-original-style="" style="box-sizing: inherit;">Linux or macOS host machine</li><li data-end="238" data-start="130" fr-original-style="" style="box-sizing: inherit;">On Windows, use WSL (Windows Subsystem for Linux) for compatibility. If using Windows, try installing WSL.</li></ul></li><li data-end="352" data-start="240" fr-original-style="" style="box-sizing: inherit;">Docker Engine installed and running<ul data-end="352" data-start="282" fr-original-style="" style="box-sizing: inherit;"><li data-end="352" data-start="282" fr-original-style="" style="box-sizing: inherit;">You may use Colima, Rancher Desktop, or any Docker-compatible engine</li></ul></li><li data-end="419" data-start="354" fr-original-style="" style="box-sizing: inherit;">Postman Desktop App (for testing APIs with obfuscated payloads)</li><li data-end="460" data-start="421" fr-original-style="" style="box-sizing: inherit;">Burp Suite (Community or Pro edition)</li><li data-end="513" data-is-last-node="" data-start="462" fr-original-style="" style="box-sizing: inherit;">Git CLI (git installed and available in terminal)</li></ul> See you at DEF CON! Liora HermanQueen, Appsec Village AppSec Village is a 100% volunteer-run organization. Please consider supporting us. <span contenteditable="false" data-button-color="{{#5de5c8}}" data-custom-variable="{{form-link-button-a8956ff8-904d-4227-88fb-eb035320b416}}" data-prefilled-form-id="{{71ad25a9-be7a-4956-9177-9b18c997b85e}}" data-prefilled-form-type="{{DonationForm}}" data-text="{{Donate Now!}}" fr-original-class="fr-deletable styled-tag-button" fr-original-style="background-color: #5de5c8" style="background-color: rgb(93, 229, 200); border-radius: 8px; height: 36px; color: rgb(255, 255, 255); padding: 8px 16px; font-size: 14px; line-height: 20px; font-family: Roboto; font-weight: 500; display: inline-block; margin: 0px; overflow-wrap: anywhere; user-select: none; box-sizing: inherit;">Donate Now!

Modern attackers aren’t waiting for CVEs.They’re quietly mapping your apps and APIs, uncovering unintended exposures, and slipping past defenses. Don’t just react, anticipate. This workshop pulls back the curtain on the modern attacker’s playbook. You’ll learn how adversaries extract intelligence from exposed metadata clues hiding in plain sight. Then, we’ll dive into crafting stealthy, context-aware payloads designed to bypass detection and exploit subtle implementation flaws.Through real-world examples and guided exercises, you’ll learn to identify these patterns, recognize evasions, and build resilient detection and prevention strategies. Takeaways:<ul><li>Early-stage recon via api access, information disclosure through common hardening</li><li>State of the art evasion techniques with our free, open-source tool Obfuskit</li><li>Normalization and encoding and adversarial techniques to subvert pathing, routing, and authentication</li><li>Step up your defensive game against these attacks</li></ul> PREREQUISITESWhat you should know: <ul><li>A basic understanding of WAFs and how they work (e.g., signature-based rules, anomaly detection).</li><li>Familiarity with common web attacks (such as XSS, SQLi, command injection) and how they’re typically detected.</li><li>Awareness of input validation and sanitization mechanisms in web applications.</li></ul>What you should have ready:  <ul><li>Operating System</li><li>Linux or macOS host machine</li><li>On Windows, use WSL (Windows Subsystem for Linux) for compatibility Linux or Mac Os host. If using windows try installing WSL.</li><li>Docker Engine installed and running</li><li>You may use Colima, Rancher Desktop, or any Docker-compatible engine</li><li>Postman Desktop App (for testing APIs with obfuscated payloads)</li><li>Burp Suite (Community or Pro edition)</li><li>Git CLI (git installed and available in terminal)</li></ul>

AppSec Village

AppSec in the Shadows: Adversarial Tradecraft in App and API Defenses

300 Convention Center Dr

Classroom Admission

Free

Waitlist

Free

Add a donation for AppSec Village