08 2025 · Teaching lab
DEF CON 33 Workshop
A hands-on nightlife app for learning how modern browser features can eliminate entire vulnerability classes.
- My role
- Workshop creator
- Project state
- DEF CON 33 workshop · 2025
- Built with
- HTML · JavaScript
- Page updated
01 / Context
The problem
Browser-security training needs a realistic application where participants can exploit a weakness, add a defence, and immediately verify the result.
02 / Build
The approach
A Node.js nightlife guest-list application with attack scripts, CSP reporting, challenge guides, Docker setup, and insecure-practice detection helpers.
03 / Highlights
What is inside
- Exploit → defend → re-test
- CSP reporting endpoint
- Custom grep and Semgrep helpers