RE: looking for advanced web hacking course

["Keifer, Trey" <Trey.Keifer () fishnetsecurity com>]

> we went fairly detailed on the topic of stack/heap overflows

I'm interested to know, what kind of information did they discuss in regards to web apps and
stack/heap overflows? My experience has been that these types of vulnerabilities are not typically
found in web apps because A) they are usually based off C classes (strcpy, etc...) which are typically
not used on the web and B) languages like ASP.Net and Java have built-in bounds checking.

Trey Keifer
Security Engineer - Level II
Fishnet Security

Office: 816.421.6611
Cell: 816.710.6830
Toll Free: 888.732.9406
Fax: 816.421.3371

http://www.fishnetsecurity.com