BEGIN:VCALENDAR PRODID:-//Microsoft Corporation//Outlook 16.0 MIMEDIR//EN VERSION:2.0 METHOD:REQUEST X-MS-OLK-FORCEINSPECTOROPEN:TRUE BEGIN:VTIMEZONE TZID:GMT Standard Time BEGIN:STANDARD DTSTART:16011028T020000 RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=10 TZOFFSETFROM:+0100 TZOFFSETTO:-0000 END:STANDARD BEGIN:DAYLIGHT DTSTART:16010325T010000 RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=3 TZOFFSETFROM:-0000 TZOFFSETTO:+0100 END:DAYLIGHT END:VTIMEZONE BEGIN:VEVENT CLASS:PUBLIC CREATED:20220202T155213Z DESCRIPTION:Don't forward this invitation. Go to Microsoft Teams to invite additional people.\n\n\nOverview:\n\n\nHandling file uploads and processin g URLs should be easy\, right? Well\, it turns out there are many things t hat can go wrong\, in lots of different ways\, and at many levels (e.g. an application\, a framework\, the web browser\, a proxy server). We explore through example how assumptions and subtle mishandling of URLs and files can lead to various high severity OWASP top 10 vulnerabilities. In this we binar we will build an understanding of these vulnerabilities that spares no detail whilst being accessible also at a non-technical level.\n\n\nLear nings:\n\n\n* Subtle dangers of the humble URL\n* Why hackers gravitate to wards File Upload features\n* Exploitation of Server-side Request Forgery (SSRF) vulnerabilities\n* How to avoid these Leprechauns \n\n\nWhen:\n\n\n Thursday 10th March @11am – Duration 40 minutes\n\n\n\n\n_______________ _________________________________________________________________ \nMicros oft Teams \nJoin live event \nJoin as a producer or presenter when it’s time for the liv e event. \nDo not forward this invitation to the attendees.\n\nProducer he lp | Presenter help | Learn more \nManage live event resources \n__________________________________________ ______________________________________ \n DTEND;TZID="GMT Standard Time":20220310T120000 DTSTAMP:20220202T155213Z DTSTART;TZID="GMT Standard Time":20220310T110000 LAST-MODIFIED:20220202T155213Z ORGANIZER;CN="Darragh Reynolds":mailto:darragh.reynolds@commsec.ie PRIORITY:5 SEQUENCE:0 SUMMARY;LANGUAGE=en-us:URLs Uploads & Leprechauns TRANSP:OPAQUE UID:040000008200E00074C5B7101A82E008000000005CEC945F4018D801000000000000000 010000000E83AD3938E6BC44BA241D72915625DDF X-ALT-DESC;FMTTYPE=text/html:\n\n\n\n\n
\n

Don't forward this invitation. Go to Microsoft Teams to invite additional people.

\n
\n
\n

Overview:

\n

Handling file uploads and processing URLs should be easy\, right? Well\, it turns out there are many things tha t can go wrong\, in lots of different ways\, and at many levels (e.g. an a pplication\, a framework\, the web browser\, a proxy\n server). We explore through example how assumptions and subtle mishandling of URLs and files can lead to various high severity OWASP top 10 vulnerabilities. In this we binar we will build an understanding of these vulnerabilities that spares no detail whilst\n being accessible also at a non-technical level.

\nLearnings:\n
    \n
  • Subtle dangers of the humble URL
  • Why hackers gravitate tow ards File Upload features
  • Exploitation of Server-side Request Forg ery (SSRF) vulnerabilities
  • How to avoid these Leprechauns \;
\n

When:

\n

Thursday 10th March @11am – Duration 40 minutes

\n
\n

\n
\n
\n
________________________________________________________________________ ________\n
\n
Microsoft Teams\n
\n\n\n
Join as a producer or presenter when it’s time for\n the live event.
\nD o not forward this invitation to the attendees.
\n
\n
< /div>\nProducer\n help | \nPre senter help | \nLearn more\n
< a class="me-email-link" style="font-size: 14px\;text-decoration: none\;col or: #6264a7\;line-height:14px\;font-family:'Segoe UI'\,'Helvetica Neue'\,H elvetica\,Arial\,sans-serif\;" target="_blank" href="https://teams.microso ft.com/l/meeting/758db779-1179-414b-87a5-a7fb57a44309/5518ab9c-b1bd-4c3c-8 b4c-ceda4eb386cb/19_meeting_OWQ3OTZmZjMtNDAyMS00ZTNlLTlmNTUtZTQzMTA0NjhiNj Bh@thread.v2/0" rel="noreferrer noopener">Manage\n live event resources
\n
\n
______________________________ __________________________________________________\n
\n
\ n\n\n X-MICROSOFT-CDO-BUSYSTATUS:BUSY X-MICROSOFT-CDO-IMPORTANCE:1 BEGIN:VALARM TRIGGER:-PT15M ACTION:DISPLAY DESCRIPTION:Reminder END:VALARM END:VEVENT END:VCALENDAR