{"id":14624,"date":"2022-10-24T12:02:39","date_gmt":"2022-10-24T11:02:39","guid":{"rendered":"https:\/\/staging2022.42crunch.com\/?p=14624"},"modified":"2023-12-13T15:47:37","modified_gmt":"2023-12-13T15:47:37","slug":"defending-apis-with-jim-manico-episode-1","status":"publish","type":"post","link":"https:\/\/staging2022.42crunch.com\/defending-apis-with-jim-manico-episode-1\/","title":{"rendered":"Defending APIs with Jim Manico"},"content":{"rendered":"\n\n\t<h4>WEBINAR<\/h4>\n\n\t<p>November 10, 2022 | 9am PST | 5pm BST<\/p>\n<h2>\n\t\tWatch the Webinar\n\t<\/h2>\n\t<iframe src=\"https:\/\/player.vimeo.com\/video\/771630845?h=a0584f90cf&amp;badge=0&amp;autopause=0&amp;player_id=0&amp;app_id=58479\" frameborder=\"0\" allowfullscreen=\"allowfullscreen\"><\/iframe>\n\t<p>Join Jim Manico, CEO of Manicode and Colin Domoney from 42Crunch, as they deliver a 2-part webinar series to help developers better defend APIs.<\/p>\n<p><strong>Episode 1: Request Forgery on the Web &#8211; CSRF &amp; SSRF<\/strong><\/p>\n<p>In this first episode Jim and Colin will discuss request forgery and how to prevent it. This technical talk is intended for the software developer who needs to build secure web applications and APIs. it will cover the\u00a0two variants of request forgery &#8211;\u00a0 client-side (CSRF) and server-side (SSRF).<\/p>\n<ul>\n<li>CSRF is most widely associated with vulnerable web applications that trick a user in a client browser into submitting transactions they never intended to use in their current authenticated session. We will discuss historical CSRF attacks and investigate various well-proven defense strategies. <strong>For API developers<\/strong> we will investigate whether APIs are vulnerable to CSRF, and how to prevent it.<\/li>\n<li>SSRF attacks allow a malicious client to trick a vulnerable server into submitting requests to an unintended location, typically by submitting malformed URLs in payloads and relying on vulnerabilities in the URL parsing code. We will discuss prevention strategies and examine some well-known examples. <strong>For API developers<\/strong>, we will investigate ways in which SSRF can be directed at vulnerable APIs and examine a few recent API breaches and the latest research.<\/li>\n<\/ul>\n\t\t\t\t\t\t\t\t\t\t<a class=\"uabb-ss-grid-button-link\" href=\"https:\/\/twitter.com\/share?url=https%3A%2F%2Fstaging2022.42crunch.com%2F%3Fp%3D14624%26fl_builder\" target=\"_blank\" onclick=\"window.open(this.href,'social-share','left=20,top=20,width=500,height=500,toolbar=1,resizable=0');return false;\" rel=\"noopener\">\n\t\t\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t<a class=\"uabb-ss-grid-button-link\" href=\"https:\/\/www.linkedin.com\/shareArticle?url=https%3A%2F%2Fstaging2022.42crunch.com%2F%3Fp%3D14624%26fl_builder\" target=\"_blank\" onclick=\"window.open(this.href,'social-share','left=20,top=20,width=500,height=500,toolbar=1,resizable=0');return false;\" rel=\"noopener\">\n\t\t\t\t\t\t\t\t\t\t<\/a>\n<h3>\n\t\tSpeakers\n\t<\/h3>\n\t\t\t\t<img decoding=\"async\" src=\"https:\/\/staging2022.42crunch.com\/wp-content\/uploads\/bb-plugin\/cache\/Colin-Domoney-2-300x300-circle.png\" alt=\"Colin Domoney 2\" title=\"Colin Domoney 2\" itemprop=\"image\"  \/>\n<h2>\n\t\tColin Domoney\n\t<\/h2>\n\t<p>Developer Advocate &amp; API Security Researcher<\/p>\n<p><strong>42Crunch<\/strong><\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n\t\t\t\t<img decoding=\"async\" src=\"https:\/\/staging2022.42crunch.com\/wp-content\/uploads\/bb-plugin\/cache\/jimmanico-BW-298x300-circle.png\" alt=\"jimmanico BW\" title=\"jimmanico BW\" itemprop=\"image\"  \/>\n<h2>\n\t\tJim Manico\n\t<\/h2>\n\t<p>CEO<\/p>\n<p><strong>Manicode Security<\/strong><\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<h2>\n\t\tWebinar Partner\n\t<\/h2>\n\t<p>At <a href=\"https:\/\/manicode.com\/\">Manicode Security<\/a> 100% of their focus is teaching developers to write secure code. They bring a combination of passion, style and decades of research into all of their education offerings.<\/p>\n\t<p><strong>Partnered with: Manicode Security<\/strong><\/p>\n\t\t\t\t<img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/staging2022.42crunch.com\/wp-content\/uploads\/2022\/10\/Manicode-Logo-1024x286.png\" alt=\"Manicode Logo\" itemprop=\"image\" height=\"286\" width=\"1024\" title=\"Manicode Logo\" onerror=\"this.style.display='none'\"  \/>\n\n","protected":false},"excerpt":{"rendered":"<p>Technical talk from 42crunch and Manicode on request forgery (CSRF and SSRF) to help software developers build secure web applications and API&#8217;s.<\/p>\n","protected":false},"author":10,"featured_media":14742,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_seopress_robots_primary_cat":"none","_seopress_titles_title":"Defending APIs with Jim Manico - Request Forgery on the web","_seopress_titles_desc":"Technical talk from 42crunch and Manicode on request forgery, to help software developers build secure web applications and API&#039;s.\r\n","_seopress_robots_index":"","site-sidebar-layout":"no-sidebar","site-content-layout":"page-builder","ast-site-content-layout":"","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"disabled","ast-hfb-above-header-display":"disabled","ast-hfb-below-header-display":"disabled","ast-hfb-mobile-header-display":"disabled","site-post-title":"disabled","ast-breadcrumbs-content":"disabled","ast-featured-img":"disabled","footer-sml-layout":"disabled","theme-transparent-header-meta":"default","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[9],"tags":[16,32],"class_list":["post-14624","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-webinars","tag-api-security-training","tag-on-demand"],"_links":{"self":[{"href":"https:\/\/staging2022.42crunch.com\/wp-json\/wp\/v2\/posts\/14624"}],"collection":[{"href":"https:\/\/staging2022.42crunch.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/staging2022.42crunch.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/staging2022.42crunch.com\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/staging2022.42crunch.com\/wp-json\/wp\/v2\/comments?post=14624"}],"version-history":[{"count":1,"href":"https:\/\/staging2022.42crunch.com\/wp-json\/wp\/v2\/posts\/14624\/revisions"}],"predecessor-version":[{"id":18095,"href":"https:\/\/staging2022.42crunch.com\/wp-json\/wp\/v2\/posts\/14624\/revisions\/18095"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/staging2022.42crunch.com\/wp-json\/wp\/v2\/media\/14742"}],"wp:attachment":[{"href":"https:\/\/staging2022.42crunch.com\/wp-json\/wp\/v2\/media?parent=14624"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/staging2022.42crunch.com\/wp-json\/wp\/v2\/categories?post=14624"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/staging2022.42crunch.com\/wp-json\/wp\/v2\/tags?post=14624"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}