Webinar Description
Key Takeaways
- Technical seminar examining security vulnerabilities in file upload and URL processing functionality
- Covers OWASP Top 10 vulnerabilities including Server-Side Request Forgery (SSRF)
- Explores attack vectors across multiple layers: applications, frameworks, browsers and proxy servers
- Designed to be accessible to both technical and non-technical audiences
Introduction
File uploads and URL handling represent some of the most deceptively dangerous features in modern web applications. While these capabilities appear straightforward to implement, they frequently harbour subtle flaws that attackers actively seek to exploit. This seminar provides a detailed examination of how assumptions and mishandling in these areas can lead to severe security vulnerabilities, including several classified within the OWASP Top 10.
About This Event
This technical seminar takes an example-driven approach to understanding security weaknesses in file upload and URL processing functionality. The session is structured to provide comprehensive technical depth whilst remaining accessible to participants without deep security expertise. Attendees will gain practical understanding of how these vulnerabilities manifest and how to prevent them in their own systems.
Understanding URL and File Upload Vulnerabilities
URLs may appear simple, but their parsing and handling involve numerous edge cases that can be exploited when applications make incorrect assumptions. Different components within a technology stack—including the application code, underlying framework, web browser and proxy servers—may interpret the same URL differently. These inconsistencies create opportunities for attackers to bypass security controls or manipulate application behaviour in unintended ways.
File upload features present particularly attractive targets for malicious actors. The complexity of validating uploaded content, determining safe storage locations and controlling how files are subsequently accessed creates multiple points where security can fail. Attackers frequently probe these features because successful exploitation can yield significant access to backend systems and sensitive data.
Server-Side Request Forgery Explained
Server-Side Request Forgery, commonly known as SSRF, occurs when an attacker can induce a server to make requests to unintended locations. This vulnerability class has gained prominence in cloud environments where internal metadata services and private network resources become accessible through a compromised server. The seminar covers exploitation techniques for SSRF vulnerabilities and demonstrates how seemingly innocuous URL handling can expose organisations to significant risk.
SSRF attacks can enable access to internal services, cloud provider metadata endpoints, and resources that would otherwise be protected by network segmentation. Understanding the mechanics of these attacks is essential for developers and security professionals working to protect modern web applications.
Who Should Attend
This seminar is suitable for software developers, security engineers, application architects and technical managers responsible for web application security. The content balances technical rigour with accessibility, making it valuable for those seeking foundational understanding as well as practitioners looking to deepen their knowledge of specific attack vectors. Participants will leave with practical insights into defensive strategies that can be applied to their own development and security practices.