{"schedule": {"version": "0.2", "base_url": "https://cfp.owaspukraine.org/owaspkyivspring2019/schedule/", "conference": {"acronym": "owaspkyivspring2019", "title": "OWASP Kyiv Spring 2019 Meetup", "start": "2019-04-06", "end": "2019-04-06", "daysCount": 1, "timeslot_duration": "00:05", "days": [{"index": 1, "date": "2019-04-06", "day_start": "2019-04-06T04:00:00+03:00", "day_end": "2019-04-07T03:59:00+03:00", "rooms": {"SkyPoint": [{"id": 36, "guid": "f1a9db95-db4f-5913-a332-88c17c1157f0", "logo": "", "date": "2019-04-06T10:00:00+03:00", "start": "10:00", "duration": "01:20", "room": "SkyPoint", "slug": "SJGDXQ", "url": "https://cfp.owaspukraine.org/owaspkyivspring2019/talk/SJGDXQ/", "title": "All about Subdomain Takeover attack", "subtitle": "", "track": null, "type": "Workshop", "language": "en", "abstract": "This workshop about understanding, finding, exploiting, and reporting subdomain misconfigurations.", "description": "This attack vector utilizes DNS entries pointing to Service Providers where the pointed subdomain is currently not in use. Depending on the DNS-entry configuration and which Service Provider it points to, some of these services will allow unverified users to claim these subdomains as their own. \r\n###### Requirements:\r\n* Laptop with Linux\r\n* Basic understanding of the Domain Name System (DNS)\r\n* Knows how to set up a subdomain\r\n* Valid accounts in several cloud services(amazon, microsoft azure (paid subscription), github) for practice\r\n* EyeWiteness, SubJack\r\n* Good mood", "recording_license": "", "do_not_record": false, "persons": [{"id": 41, "code": "8PAVKZ", "public_name": "Kostiantyn Sanduliak", "biography": "https://www.linkedin.com/in/kostiantyn-sanduliak", "answers": []}], "links": [], "attachments": [], "answers": []}, {"id": 39, "guid": "e6b1ed32-9002-5fcb-a9b6-05007286d90e", "logo": "", "date": "2019-04-06T11:30:00+03:00", "start": "11:30", "duration": "01:20", "room": "SkyPoint", "slug": "EQNZA9", "url": "https://cfp.owaspukraine.org/owaspkyivspring2019/talk/EQNZA9/", "title": "Overview of iOS apps security assessment", "subtitle": "", "track": null, "type": "Workshop", "language": "en", "abstract": "Short overview of iOS security assessment: what to test, how to test, tools overview", "description": "- iOS security architecture overview\r\n- Difference between iOS and Android security assessments\r\n- Few words about OWASP MSTG \r\n- OWASP Mobile TOP 10 overview\r\n- What do you need for testing?\r\n- Several tools demonstration", "recording_license": "", "do_not_record": false, "persons": [{"id": 42, "code": "Z7NXG3", "public_name": "Dmytro Diordiichuk", "biography": "Biography", "answers": []}], "links": [], "attachments": [], "answers": []}, {"id": 35, "guid": "b3f95305-b5df-57ba-b4c4-dbbe8d63ac96", "logo": "", "date": "2019-04-06T13:00:00+03:00", "start": "13:00", "duration": "00:40", "room": "SkyPoint", "slug": "FAEFWJ", "url": "https://cfp.owaspukraine.org/owaspkyivspring2019/talk/FAEFWJ/", "title": "Shooting yourself in the feet with php", "subtitle": "", "track": null, "type": "Talk", "language": "en", "abstract": "PHP object injection attack review with examples and demos.", "description": "In this talk I'm going to uncover php deserialization mechanism and how it can be used to hack web applications. Every exploitation will be demonstrated in real time using prepared lab and debugger. Minimal php knowledge required for better understanding.", "recording_license": "", "do_not_record": false, "persons": [{"id": 60, "code": "QMHZNM", "public_name": "Taras Sharkadi", "biography": "Php developer with a little experience.", "answers": []}], "links": [], "attachments": [], "answers": []}, {"id": 37, "guid": "e4a4082d-641a-503d-8501-4996e40c07de", "logo": "", "date": "2019-04-06T15:00:00+03:00", "start": "15:00", "duration": "00:40", "room": "SkyPoint", "slug": "D7WZTU", "url": "https://cfp.owaspukraine.org/owaspkyivspring2019/talk/D7WZTU/", "title": "\u0412\u0430\u0448\u0435 \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e!", "subtitle": "", "track": null, "type": "Talk", "language": "en", "abstract": "\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0430 \u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0441\u044f \u0432\u0441\u0451 \u0431\u043e\u043b\u0435\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0439, \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e \u0432\u044b\u0441\u043e\u043a\u043e\u0443\u0440\u043e\u0432\u043d\u0435\u0432\u044b\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0441\u043d\u0438\u0436\u0430\u044e\u0442 \u043f\u043e\u0440\u043e\u0433 \u0432\u0445\u043e\u0434\u0430, \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u044f \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439 \u0431\u0435\u0437\u0443\u0434\u0435\u0440\u0436\u043d\u043e \u0440\u0430\u0441\u0442\u0451\u0442, \u0438, \u043a\u0430\u043a \u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0435, \u0440\u0430\u0441\u0442\u0451\u0442 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u043e\u043a\u0440\u0443\u0436\u0430\u044e\u0449\u0438\u0445 \u043d\u0430\u0441 \u0441\u0438\u0441\u0442\u0435\u043c. \u0423\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c.\r\n\r\n\u0414\u043e\u043a\u043b\u0430\u0434 \u043e\u0440\u0438\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d \u043d\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u043d\u0435\u0431\u0435\u0437\u0440\u0430\u0437\u043b\u0438\u0447\u043d\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435\u0439. \u042f \u0440\u0430\u0441\u0441\u043a\u0430\u0436\u0443 \u043e \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u0432\u0435\u043a\u0442\u043e\u0440\u0430\u0445 \u0430\u0442\u0430\u043a \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439, \u0441\u043f\u043e\u0441\u043e\u0431\u0430\u0445 \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u043d\u0438\u0445, \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0430\u0445 \u0434\u043b\u044f \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0430\u043d\u0438\u044f \u0443\u0440\u043e\u0432\u043d\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043f\u0440\u0438\u043b\u0430\u0433\u0430\u044f \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u0443\u0441\u0438\u043b\u0438\u0439.", "description": "\u0412 2018 \u043e\u0442\u0448\u0443\u043c\u0435\u043b\u0438 \u0443\u0442\u0435\u0447\u043a\u0438 \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445 \u043d\u0430\u0441\u0435\u043b\u0435\u043d\u0438\u044f \u0418\u043d\u0434\u0438\u0438 \u043d\u0430 1.1 \u043c\u043b\u0440\u0434 \u0447\u0435\u043b\u043e\u0432\u0435\u043a, 330 \u043c\u043b\u043d \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Twitter, 50 \u043c\u043b\u043d \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u0438 87 \u043c\u0438\u043d \u043b\u0438\u0447\u043d\u044b\u0445 \u043f\u0435\u0440\u0435\u043f\u0438\u0441\u043e\u043a \u043d\u0430 Facebook, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u0434\u0435\u0441\u044f\u0442\u043a\u0438 \u0442\u044b\u0441\u044f\u0447 \u0434\u0440\u0443\u0433\u0438\u0445 \u0443\u0442\u0435\u0447\u0435\u043a \u043f\u0435\u0440\u0441\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e\u0441\u0442\u0430\u043b\u0438\u0441\u044c \u0437\u0430 \u043a\u0430\u0434\u0440\u043e\u043c \u0438\u043b\u0438 \u0432\u043e\u043e\u0431\u0449\u0435 \u043d\u0435 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b. \u0411\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u0432 \u0441\u0432\u044f\u0437\u0430\u043d\u043e \u0441 \u043f\u0440\u043e\u0441\u0442\u044b\u043c\u0438 \u0438 \u0445\u043e\u0440\u043e\u0448\u043e \u0438\u0437\u0443\u0447\u0435\u043d\u043d\u044b\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u043b\u0435\u0433\u043a\u043e \u043f\u0440\u043e\u0442\u0438\u0432\u043e\u0441\u0442\u043e\u044f\u0442\u044c. \r\n\r\n\u041e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u0442\u0435\u0437\u0438\u0441\u044b:\r\n\r\n- \u0412\u0435\u043a\u0442\u043e\u0440\u044b \u0430\u0442\u0430\u043a \u0432 \u0432\u0430\u0448\u0435\u043c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0438\r\n- \u0421\u043f\u043e\u0441\u043e\u0431\u044b \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0430\u043d\u0438\u044f \u0443\u0440\u043e\u0432\u043d\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438\r\n- \u041f\u043b\u0430\u043d \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u043d\u0430 \u0441\u043b\u0443\u0447\u0430\u0439 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0432\u0437\u043b\u043e\u043c\u0430\r\n- \u041d\u0430 \u0434\u0435\u0441\u0435\u0440\u0442: \u043f\u043e\u0434\u0431\u043e\u0440\u043a\u0430 \u0438\u0437\u044b\u0441\u043a\u0430\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043f\u043e\u0432\u044b\u0448\u0430\u044e\u0449\u0438\u0445 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043f\u0430\u0440\u0430\u043d\u043e\u0439\u0438", "recording_license": "", "do_not_record": false, "persons": [{"id": 64, "code": "XJUXHY", "public_name": "Dmytro Naumenko", "biography": "- CTO @ HiQDev\r\n- 8 \u0440\u043e\u043a\u0456\u0432 \u0432 \u0432\u0435\u0431-\u0440\u043e\u0437\u0440\u043e\u0431\u0446\u0456\r\n- Core \u0434\u0435\u0432\u0435\u043b\u043e\u043f\u0435\u0440 PHP-\u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0430 Yii\r\n- \u0410\u043a\u0442\u0438\u0432\u043d\u0438\u0439 \u0447\u043b\u0435\u043d Open Source \u0441\u043f\u0456\u043b\u044c\u043d\u043e\u0442\u0438\r\n- [GitHub](https://github.com/silverfire)", "answers": []}], "links": [], "attachments": [], "answers": []}, {"id": 34, "guid": "94203f6b-23d2-58b2-8cc9-aacad08566cc", "logo": "", "date": "2019-04-06T16:00:00+03:00", "start": "16:00", "duration": "00:40", "room": "SkyPoint", "slug": "R7VML7", "url": "https://cfp.owaspukraine.org/owaspkyivspring2019/talk/R7VML7/", "title": "OWASP MSTG in Real Life", "subtitle": "", "track": null, "type": "Talk", "language": "en", "abstract": "Working with mobile payments processing requires us to constantly consider security of our users on every project development phase. OWASP MSTG (Mobile Security Testing Guide) perfectly summarizes our experience that I am willing to share with the audience.", "description": "I will talk about:\r\n\r\n- How security is treated in small companies working on mobile application from scratch to release;\r\n- What is MSTG and MASVS, how developers to propose security technics and how it helps QA team to test;\r\n- General Testing Guide overview: Authentication, Networking, Crypto, etc.\r\n- Short summary if iOS Testing guide: Jailbreak, Data Storage, Tampering, Reverse Engineering, etc.\r\n- Popular third party security SDKs for e-Commerce apps", "recording_license": "", "do_not_record": false, "persons": [{"id": 55, "code": "L3WJZH", "public_name": "Julia Potapenko", "biography": "iOS Software Engineer, interested in Security, working on applications with mobile payments in PCI DSS Level 1 certified company.", "answers": []}], "links": [], "attachments": [], "answers": []}, {"id": 38, "guid": "e8ce1967-66ee-52e0-b601-c7138a16a3f4", "logo": "", "date": "2019-04-06T17:00:00+03:00", "start": "17:00", "duration": "00:40", "room": "SkyPoint", "slug": "NNMNM7", "url": "https://cfp.owaspukraine.org/owaspkyivspring2019/talk/NNMNM7/", "title": "Adversarial attacks on DNNs", "subtitle": "", "track": null, "type": "Talk", "language": "en", "abstract": "When Deep Neural Networks go wrong \u2013 adversarial examples and what we can learn from them.", "description": "", "recording_license": "", "do_not_record": false, "persons": [{"id": 69, "code": "KSVEU7", "public_name": "Andrey Shalaenko", "biography": "Was born in 1988", "answers": []}], "links": [], "attachments": [], "answers": []}]}}]}}}