Hacking with PHP
1 like440 views
The document discusses hacking with PHP, focusing on increasing project security and understanding various cyber threats. It covers risk assessment, types of attacks such as ransomware and XSS, and effective countermeasures to enhance security. Additionally, it encourages creative coding and group discussions around real-world attack experiences and best practices.
Hacking with PHP
- 1. Hacking with PHP Mark Niebergall LonghornPHP 2019 https://github.com/mbniebergall/hacking-with-php
- 2. Mark Niebergall • PHP since 2005 • Masters degree in MIS • Senior Software Engineer • Drug screening project • Utah PHP Co-Organizer • CSSLP, SSCP Certified and SME • Father, long distance running, fishing, skiing
- 3. Objective • Understand attacks • Increase project security • Implement effective countermeasures
- 6. Hacking with PHP • Risk to Resources • Threat Modeling • Types of Attacks • Countermeasures
- 8. Risk to Resources • Data • Functionality • Hardware • Source code
- 11. Threat Modeling • Identify threats - Script kiddies - Organized groups - Nation states - Curious users
- 12. Threat Modeling • Risk assessment
- 13. Types of Attacks
- 14. Types of Attacks • Ransomware • Malware • Covert data theft • Data decryption (credentials, personal, credit card, etc.) • Denial of Service (DoS)/Distributed DoS (DDoS) • Injection • Session hijacking • Cross-site scripting (XSS) • Spear Phishing • Name others?
- 15. Countermeasures
- 16. Countermeasures • Prevent attacks from being successful - Attacks are going to happen, can only reduce likelihood of success
- 18. Coding Time! • Be creative • Group input • Different attack types • How to implement countermeasures
- 19. Group Discussion • Attacks seen in the wild • Countermeasures used • PHP best practices • OSI model layers