04 March, 2023

• Content of Workshop
  • Introduction to Hacking
  • Penetration and Bug Bounty
  • WebApplication Basics and Introduction to Burp Suite
  • OWASPTop 10
  • Information Gathering
  • XSSand Command Injection
  • Broken Access Control
  • CTFChallenges

• Workshop Objectives:

The objectives of the workshop were to:

• Understand the basics of ethical hackingand penetration testing
• Learn about common vulnerabilities and attacks in web applications
• Develop practical skills in usingtools such as BurpSuite for testingweb applications
• Learn aboutbug bounty programs and the process of reporting vulnerabilities

• About the Workshop

The workshop was conducted in interactive format comprising of presentation, live demo and hands-on practices. The workshop aimed to provide participants with an introduction to ethical hacking and other practical concepts of web application security. It was started with the introduction of hacking and bug bounty. Experts demonstrated the concept of interception and brute-force attack on web application using Burp Suite. Participants have also performed same on their machine. The workshop then covered the OWASP Top 10, a list of the top ten most common vulnerabilities in web applications. The participants learned about each vulnerability, its impact, and how to exploit it using Burp Suite. The concepts of information gathering and XSS were also covered by the experts. The workshop then covered Broken Access Control, a vulnerability that allows attackers to gain unauthorized access to resources or data. The participants learnt how to identify and exploit Broken Access Control vulnerabilities in web applications. Experts gave some security challenges to the participants and also explained its solution to the participants.

Overall, the workshop was a success, with participants expressing satisfaction with the content andformat of the workshop. The workshop equippedthem with practical skills and knowledge in the field of web application security.

• Registration sheet

Vishwakarma Government Engineering College, Chandkheda Information Technology Department

Workshop on "Web Application Security" Registration Sheet

Data: 04/03/2023                                                                                                        Time:11:00 AM to 05:00PM