0x28 Wellington Meetup with a crash course on web security headers

We’re excited to bring another interactive Hack the Box (HTB) meetup to Wellington! Our speaker for this event is Jake who will be presenting on web security headers: what are they and how can we exploit them?

You've written a pentest report and right down the bottom you've got the obligatory 'CSP misconfigured', 'HSTS missing preload', 'Missing security headers'. You've thrown them in cause Burp or Nikto told you to, but why are these an issue? This talk will walk you through a few of the most common security headers, how they work, the attacks they mitigate, and some ways we can exploit poor configuration.

WHAT TO EXPECT

• A presentation on the topic mentioned prior.
• A hands-on, guided walk through to solve a Hack The Box machine yourself.

WHAT YOU GET

• FREE HTB SWAG/GIVEAWAYS
• FREE access to HTB machines during the event

WHAT YOU NEED

• A laptop
• A HTB account
• Discord application

HOUSE RULES

• Follow all rules and guidelines in the HTB TOS: HTB Terms of Service
• Active HTB content cannot be shared publicly. Retired challenges or machines are fair game.

EVENT DETAILS

• Date: Tuesday, 27th October 2026
• Time: 5:30 PM (NZDT)
• Location: InternetNZ - Level 13/18 Willis Street, Wellington Central, Wellington 6011
• Attendee limit: 30 + speakers, and hosts.

ADDITIONAL NOTES

• Join our Discord for event updates

CODE OF CONDUCT
We strive to create a safe, welcoming, and inclusive environment for all attendees. To ensure a positive experience for everyone, the following behaviors are strictly prohibited:

• Smoking
• Drinking alcohol
• Any form of discrimination or racism
• Any other forms of misconduct

Any attendee found engaging in these behaviours will be immediately banned and permanently removed from the group. Thank you for helping us maintain a respectful and enjoyable atmosphere for all.