In this presentation speaker, Arman Pathan talks about different attacks via postMessage() API Note: All content is purely meant for educational purpose and we don't take any responsibility for potential abuse of any knowledge that is shared on this channel. This session was hosted by @nullDubai chapter of null, India's largest open security community. Registered as a non-profit society in 2010, we have been active since even before that. null is about spreading information security awareness. All our activities such as null Monthly Meets, null Humla, null Bachaav, null Puliya, null Job Portal are for the cause of that. For more, you can visit https://www.null.community For upcoming events - https://www.null.community/upcoming ... https://www.youtube.com/watch?v=9h4MHwbJYzY

DNS(Domain Name System) is the crucial & ubiquitous fabric of the Internet. While we rely on accessing websites, applications, devices using a Fully Qualified Domain Name, on a daily basis, in a network, DNS can also be extremely valuable & effective defence layer in a multi-tiered security approach. This talk will give an introduction to DNS RPZ(Response Policy Zones) and how it can be leveraged to stop threats in the network. The key takeaways for the talk are 1. Idea of a flat network & it’s constraints 2. How malware(C2/Botnets, phishing URL’s) leverages DNS 3. How a DNS Firewall(DNS Response Policy Zones) can mitigate threats at the resolution layer 4. Lessons learned in implementing this for 100+ networks in Tier-II & Tier-III cities The intended audience for this talk are 1. System & network administrators 2. ISP’s 3. Anyone running a network ... https://www.youtube.com/watch?v=rzj52ghuFCk