World Congress 2022 • Jun 15, 2022

Capture the Flag 101

Micah Silverman

Is a widely used package secretly compromising your Node.js runtime? Adopt a "hack yourself" mindset with Capture the Flag exercises to proactively exploit and patch hidden architectural vulnerabilities.

Starting at 4:16 · Watch from the beginning

Capture the Flag 101 thumbnail

Checking access…

Playback and chapters load privately for Free videos.

Matching moments

4:48 min

Using intentionally vulnerable applications for practical security training

Bozidar Spirovski

Bozidar Spirovski +1 · Coffee With Developers

3:55 min

Identifying underlying Node.js runtime vulnerabilities using fuzzing tools

Sonya Moisset · World Congress 2023

26:47 min

Exploring pathways to application security careers and research workflows

Vandana Verma Sehgal · LIVE

2:41 min

Setting the stage for software security demos

Vandana Verma Sehgal · LIVE

4:35 min

Improving developer education with realistic security training environments

Joseph Katsioloudes

Joseph Katsioloudes · World Congress 2025

3:58 min

Exploring advanced security tooling and community dependency vetting

Niels Tanis

Niels Tanis · World Congress 2024

More from World Congress 2022

What the heck do "declarative" and "reactive" actually mean? thumbnail

What the heck do "declarative" and "reactive" actually mean?

André Kovac

The Design and Evolution of C++ thumbnail

The Design and Evolution of C++

Bjarne Stroustrup

But, you're not Facebook thumbnail

But, you're not Facebook

Kristijan Ristovski

Communicate efficiently with Software Architecture Diagrams thumbnail

Communicate efficiently with Software Architecture Diagrams

Simon Lasselsberger

Get Ready for Jakarta EE 10! thumbnail

Get Ready for Jakarta EE 10!

Ivar Grimstad · Jakarta EE

Keep your code refactorable thumbnail

Keep your code refactorable

Gerrit Stapper

Upcoming sessions on this topic

Supply Chain Security for the Everyday Engineer

Pradumna Saraf

Kestra Technologies

Quality Assurance Engineer

Beyond File Dumps: Context Engineering for Coding Agents

Animesh Dutta

Arm

Senior Software Engineer

Shipping MCP to Real Users: Scaling, Auth, and the PII Leak You Didn't See Coming

Hadar Geva

Myop

CTO & Co-founder

What I Got Wrong Shipping an MCP Server for Live Infrastructure

Pritesh Kiri

Harness

Developer Relations Engineer

When Caches Lie: Solving Transactional Integrity and Distributed Race Conditions in Spring Boot

Shuchita Prasad

JPMorgan

Senior Lead Engineer

Objection! Put Your Agent’s Code on Trial, Where Sessions Testify and Checkpoints Are Evidence

Abhi Singh

Entire

Solutions Engineer

Related videos

Stranger Danger: Your Java Attack Surface Just Got Bigger thumbnail

Stranger Danger: Your Java Attack Surface Just Got Bigger

Vandana Verma Sehgal

LIVE · Jan 2022

Hack-Proof The Node.js runtime: The Mechanics and Defense of Path Traversal Attacks thumbnail

Hack-Proof The Node.js runtime: The Mechanics and Defense of Path Traversal Attacks

Sonya Moisset

World Congress · 2023

The attacker's footprint thumbnail

The attacker's footprint

Antonio De Mello +1

LIVE · Apr 2022

Oops! Stories of supply chain shenanigans thumbnail

Oops! Stories of supply chain shenanigans

Zbyszek Tenerowicz

LIVE · Sep 2021

How to Defend Against Data Manipulation Attacks - Bozidar Spirovski & Wekoslav Stefanovski thumbnail

How to Defend Against Data Manipulation Attacks - Bozidar Spirovski & Wekoslav Stefanovski

Bozidar Spirovski +1

Coffee With Developers · Mar 2026

Simple Steps to Kill DevSec without Giving Up on Security thumbnail

Simple Steps to Kill DevSec without Giving Up on Security

Isaac Evans · Semgrep

World Congress · 2025

Related articles

BB

Benedikt Bischof

Walking Into The Era of Supply Chain Risks

Welcome to this issue of the WeAreDevelopers Live Talk series. This article recaps an interesting talk by Vandana Verma who introduced the audience interesting topic of supply chain risks.About the...

over 4 years ago

Walking Into The Era of Supply Chain Risks

CH

Chris Heilmann

Dev Digest 134 - Where pixels sing?

News and ArticlesWeAreDevelopers LIVE Data and Security Day is on Wednesday, 25/09/2024. Learn about OPC UA Updates, Best Practices for Using GitHub Secrets, Passwordless Web 1.5, Emerging AI Secur...

about 2 years ago

Dev Digest 134 - Where pixels sing?

CH

Chris Heilmann

Dev Digest 138 - Are you secure about this?

Hello there! This is the 2nd "out of the can" edition of 3 as I am on vacation in Greece eating lovely things on the beach. So, fewer news, but lots of great resources. Many around the topic of sec...

about 2 years ago

Dev Digest 138 - Are you secure about this?

DC

Daniel Cranney

Dev Digest 188: CfP time, the risks of NPM and IKEA algorithms

Inside last week’s Dev Digest 188 . 🤖 GitHub Copilot CLI is now in public review 💻 Microsoft is bringing ‘vibe working’ to office apps 🎣 Attackers abuse AI tools to generate captchas in fishing at...

about 1 year ago

IKEA-style no-text diagrams explaining algorithms

From learning to earning

Jobs that call for the skills explored in this talk.

Product Security Incident Response Analyst

Expert $329k Remote Github Code Review Data Analysis

Staff Developer Advocate, GitHub Security Lab

San Francisco, CA, United States

Experienced $323k Git Github Databases

Cyber Defense & Incident Response

Delivery Hero SE

Remote Golang Cybercrime Security Log

Senior Software Engineer, Vulnerability Management

Expert $329k Remote Ruby Golang Docker

Cyber Defense Specialist

Raiffeisen Bank International AG

€47k Mitre Att&ck Cyber Warfare Cyber Security

Senior Incident Response Analyst

Expert $124k Remote Github Code Review Data Analysis