n|u Hyderabad Meet - August 2022

About this event

About null:

null is an open security community for ethical hackers, security professionals, and security enthusiasts, born out of the need for:

Promoting advanced security research.Spreading security awareness among the netizens.A Centralized knowledge base for security related information.All our Null Hyderabad meets are Free and Open to all, just register and join us.

Venue Details:

F5 Networks,

The Skyview, Building 20, 9TH Floor,

Near BioDiversity Circle, Hyderabad, Telangana 500081

Google Map Location

Note:

Please reach the venue at-least 20 mins early for the security checks.

1. Please carry original government issued ID proof for security checks(Registered Name should match with the ID)

2. Laptops are not allowed, please do not carry them.

3. Parking is available in B4, Building 20

Topics:

1. Introductions.

2. News Bytes by Sandeep Varma

3. Next-gen supply chain attack by N B Sri Harsha

In this talk, Harsha will cover a new supply chain attack due to the node package maintainers. He will explain how to automate and remediate these kinds of attacks.
4. Networking Break

5. Gopher: A Swiss Army Knife to exploit beyond a Simple SSRF by Pavan Mohan

This is a live demonstration of how Gopher can be used in a SSRF exploitation. Pavan will use a deliberately created insecure Django web application to cover SSRF basics, how to make POST requests and connect to other internal services by exploiting SSRF using Gopher protocol.
6. Segmentation by Anjali

In this talk, Anjali is going to cover the differences between network segmentation and micro-segmentation followed with discussions about lateral movement spreads.
7. Feedbacks & Suggestions.

About Speakers:

Sandeep Varma, a cyber security enthusiast currently pursuing his computer science degree at CMR technical campus.

N B Sri Harsha is the founder of Defmax Technologies and has 9+ years of experience in the Information Security field on various verticals like Web PT, Mobile PT, Network PT, Source code review, IOT Security & Cloud security. He currently holds OSWE certificate.

Anjali Bomma, working as a Senior Security Engineer at Invesco pvt ltd. She is open to learn new technologies.

Pavan Mohan aka pavanw3b is a developer turned bug hunter and leads the Product Security team at ServiceNow. He is one of the core members of Null Hyderabad chapter and he has been contributing to the infosec community by presenting at Defcon and null events. He leads an open source security tool: Sh00t. He tries his luck in bug bounty programs when he goes out of T-Shirts and made it to some Hall of Fame.

Please reach out to us for additional information: bheemamahesh [at] gmail [dot] com or vhssunny1 [at] gmail [dot] com or me [at] pavanw3b [dot] com