n|u Hyderabad Meet - July 2023

About this event

Important Note:

The event has been moved to July 29 per the local authority's circulation and the weather warnings.

Venue:

Thoughtworks Technologies (India) Pvt Ltd

#115, 4th Floor, Rajapushpa Summit 2-58, Sy.No.115, Financial District, Nanakaramguda, Telangana 500008

Google Maps Location

Topics:

1. Introduction to Null Hyderabad

2. Security Newsbytes by Lakshmi Priya Samsani

3. Hacking GraphQL by Moses Thipparthi

- In this talk, Moses will talk about principles of GraphQL, its features and how we can analyze the attack surface and abuse the existing features of GraphQL with tools to inject, exfiltrate and exhaust the applications powered by GraphQL

4. Shift-left Security - IaC by Satish Kumar Patnayak

- In this session, Satish will provide a comprehensive demonstration covering various aspects of Infrastructure as Code (IaC) including what it is, associated vulnerabilities, scanning terraform code, the significance shift-left security and the integration on Terraform scanning into pipeline.

5. Social Break

6. How to respond to Cyber security Incidents: Incident Response 101 by Subhash Popuri

- In this session, Subhash will cover topics ranging from Incident response life cycle to real life lessons learnt from responding to incidents. The talk will also feature few case studies from real life incidents and illustrate best practices while responding to an incident. Last but not least, the talk will also throw light on how to become a good incident responder (skills required for a successful IR professional). This sneak peak into the world of IR is intended for folks who don’t know what incident response is and/or who aspire to become incident responders.

7. Feedback & Suggestions

Important Notes:

Please reach the venue at least 20 mins early for the security checks.

Please carry original government-issued ID proof for security checks (Registered name should match with your name on the ID)

Only the speakers are allowed to carry laptops.

About Speakers:

Lakshmi Priya Samsani is working as Web Application Pentester at ADP India Pvt Ltd for past 9 months. She graduated from RGUKT-IIIT Srikakulam with an integrated B.Tech. She is curious about research and learning new concepts in cyber security.

Moses Thipparthi is working as a Security Testing Engineer at EPAM Systems. He’s a passion-driven independent researcher for secure software engineering and an open-source contributor, particularly, to the web side of things. He started working as a web penetration tester as an enthusiast with zero XP, 2 years ago and now he finds ways to blend his past developer experiences to help both the software and security teams to breed solutions that matter the most.

Satish is an Information Security Consultant with 11+ years of experience in various areas of information security. His areas of interest are Mobile and Cloud Security. He developed a vulnerable android application using Kotlin – AndroGoat. This is the first ever vulnerable app developed using Kotlin. This will help Security Testers/Professionals/Enthusiasts, Developers...etc. to understand and defend the vulnerabilities in Android platform. He presented AndroGoat in the Blackhat Europe 2020 event. For details about speaker - https://twitter.com/satish_patnayak

Subhash is a security professional who is interested to learn and share knowledge. To know more, please visit: https://in.LinkedIn.com/in/pbssubhash

About null:

null is an open security community for ethical hackers, security professionals, and security enthusiasts, born out of the need for:

Promoting advanced security research. Spreading security awareness among the netizens. A Centralized knowledge base for security-related information. All our Null Hyderabad meets are Free and Open to all, just register and join us.

Please reach out to us for additional information: bheemamahesh [at] gmail [dot] com or vhssunny1 [at] gmail [dot] com or me [at] pavanw3b [dot] com