Ruby Hacking Practicum

Have you ever dreamed of hacking a mainframe or infiltrating the network of a shady government organization? In this workshop, I will get you one step closer to achieving your dream.

You will learn about the most prevalent attack methods used to exploit Ruby applications by actually hacking some apps. There will be no theory and no fancy-talk, just hacking. For each attack method we cover, I will take you through three steps--detection, exploitation, and patching. Towards the end, I will share tools used by security experts to automate the detection and exploitation process.

Some attack methods you will learn more about:

* Cross-site request forgery
* Social engineering
* Cross-site-scripting
* Password attacks
* Rails-specific attacks


This talk is aimed at Ruby developers of any skill-level who want to learn more about security via hacking. By the end of the talk, you will be able to detect, exploit, and patch various security vulnerabilities. I will use Rails and Sinatra as hacking mediums, but the attack methods learned will apply to any Ruby application.