{"parse":{"title":"OWASP Israel 2008 Conference Shai Chen","pageid":6833,"revid":38338,"text":{"*":"<h2><span class=\"mw-headline\" id=\"Achilles.E2.80.99_heel_.E2.80.93_Hacking_Through_Java_Protocols\">Achilles\u2019 heel \u2013 Hacking Through Java Protocols</span><span class=\"mw-editsection\"><span class=\"mw-editsection-bracket\">[</span><a href=\"/index.php?title=OWASP_Israel_2008_Conference_Shai_Chen&amp;veaction=edit&amp;vesection=1\" title=\"Edit section: Achilles\u2019 heel \u2013 Hacking Through Java Protocols\" class=\"mw-editsection-visualeditor\">edit</a><span class=\"mw-editsection-divider\"> | </span><a href=\"/index.php?title=OWASP_Israel_2008_Conference_Shai_Chen&amp;action=edit&amp;section=1\" title=\"Edit section: Achilles\u2019 heel \u2013 Hacking Through Java Protocols\">edit source</a><span class=\"mw-editsection-bracket\">]</span></span></h2>\n<p>Web applications normally use clear HTTP protocols to communicate, and can be manipulated with interception proxies such as Achilles, WebScarab and Paros. However, many modern applications utilize thick clients (such as applets) which are based on binary protocols that cannot be easily manipulated in such methods.\n</p><p>In this lecture we will present techniques for manipulating such applications, including new techniques for live manipulation of Java serialized protocols, allowing the tester to overcome many of the obstacles associated with the testing of such applications.\n</p>\n<h2><span class=\"mw-headline\" id=\"Bio\">Bio</span><span class=\"mw-editsection\"><span class=\"mw-editsection-bracket\">[</span><a href=\"/index.php?title=OWASP_Israel_2008_Conference_Shai_Chen&amp;veaction=edit&amp;vesection=2\" title=\"Edit section: Bio\" class=\"mw-editsection-visualeditor\">edit</a><span class=\"mw-editsection-divider\"> | </span><a href=\"/index.php?title=OWASP_Israel_2008_Conference_Shai_Chen&amp;action=edit&amp;section=2\" title=\"Edit section: Bio\">edit source</a><span class=\"mw-editsection-bracket\">]</span></span></h2>\n<p>Shay Chen is Senior Consultant and Team Leader at Hacktics Ltd. In his current position in Hacktics, Shay Chen is leading a team of high-end penetration testers and consultants in the application security field. He has over seven years in information technology and security, including a strong background in software development. Shay is an experienced speaker, and regularly instructs a wide variety of security related courses. Before moving into the information security field, he was involved in various software development projects in ERP, mobile &amp; enterprise environments.\n</p>\n<!-- \nNewPP limit report\nCached time: 20261104034029\nCache expiry: 86400\nDynamic content: false\nCPU time usage: 0.002 seconds\nReal time usage: 0.004 seconds\nPreprocessor visited node count: 6/1000000\nPreprocessor generated node count: 12/1000000\nPost\u2010expand include size: 0/2097152 bytes\nTemplate argument size: 0/2097152 bytes\nHighest expansion depth: 2/40\nExpensive parser function count: 0/100\n-->\n\n<!-- \nTransclusion expansion time report (%,ms,calls,template)\n100.00%    0.000      1 - -total\n-->\n\n<!-- Saved in parser cache with key wiki:pcache:idhash:6833-0!*!*!!*!*!* and timestamp 20261104034029 and revision id 38338\n -->\n"},"langlinks":[],"categories":[],"links":[],"templates":[],"images":[],"externallinks":[],"sections":[{"toclevel":1,"level":"2","line":"Achilles\u2019 heel \u2013 Hacking Through Java Protocols","number":"1","index":"1","fromtitle":"OWASP_Israel_2008_Conference_Shai_Chen","byteoffset":0,"anchor":"Achilles.E2.80.99_heel_.E2.80.93_Hacking_Through_Java_Protocols"},{"toclevel":1,"level":"2","line":"Bio","number":"2","index":"2","fromtitle":"OWASP_Israel_2008_Conference_Shai_Chen","byteoffset":633,"anchor":"Bio"}],"displaytitle":"OWASP Israel 2008 Conference Shai Chen","iwlinks":[],"properties":[]}}