Name: "Secure the Jack in the Box" + "testssl.sh: What's new?"
Start: 2025-04-24T18:00:00+02:00
End: 2025-04-24T20:00:00+02:00
Location: An d. Alster 64

iMoin Hamburg!

we'll have a meeting this week with one regular longer talk and a shorter one.

Again, we'll be guest at Check24, thank you!

# **TL;DR**

* Start: 6:30 pm , April 24th.
* Doors open for socializing 6:00pm. Pls be on time for the talk
* Location: An der Alster 64, Check24, \*5\*. OG
* Talks: OWASP secureCodeBox project + What's new in testssl.sh
* Speakers: Jannik Hollenbach + Dirk Wetter

# **Abstract 1**

The OWASP secureCodeBox project aims to provide a unified way to run and automate open-source scanning tools like nmap, nuclei, zap, ssh-audit, and sslyze to continuously scan the code and infrastructure of entire organizations.

This allows setting up automated scans that will regularly scan internal networks and internet-facing systems for vulnerabilities. The SCB also allows defining rules to automatically start more in-depth scans based on previous findings, e.g., to start a specialized SSH scan if a port scan discovers an open SSH port.

# **Abstract 2**

testssl.sh is being released in version 3.2 and it comes with some interesting features like postquantum key exchange or correctly speaking PQ KEMs. The short talk will give you a heads up where you probably already in use them without knowing and how you can check the server whether the server supports it. The talk will briefly describe further features of the new release and what's planned for the feature.

# **About our OWASP meetings**

Our meetings are about software and their security in the Internet and/or information security in general. All meetings are free, open to everyone and free of charge, with or without membership.

You'll be meting people who deal with IT security either professionally or privately: Developers, managers, “pen testers” and anyone interested in (mostly web) security. The atmosphere is open and relaxed. We're all about exchanging experiences, talking tech and networking. If you want to sell products or services, you're in the wrong place. You are very welcome to pass on a tip about our meetings to your colleagues or acquaintances.

Schönen Gruß, Dirk

Dirk Wetter

OWASP Hamburg Meeting

OWASP® Foundation 

Technology

Education & Technology

Computer Security

Cloud Security

Software Security

Application Security

Information Security

Network Security

Web Security

White Hat Hacking

Web Application Security

OWASP

Ethical Hacking

# **Bio1**

Jannik Hollenbach is one of the project leads of the OWASP secureCodeBox and newly also the co-project lead of the OWASP JuiceShop project. In his work life, he's working on writing, operating, and securing software, often in and around Kubernetes.

# **Bio2**

Dirk started with Z80 assembler while studying chemistry, ended up writing a PhD thesis in surface science physics . Today he's a seasoned security consultant, defends or breaks systems and applications in organizations or "just" helps organizing information security.

He supports the mission of OWASP since 2010 with national and international matters and as time allows, supports projects.

Jannik Hollenbach + Dirk Wetter

"Secure the Jack in the Box" + "testssl.sh: What's new?"

An d. Alster 64

Share

OWASP Hamburg Meeting

"Secure the Jack in the Box" + "testssl.sh: What's new?"

OWASP Hamburg Meeting

Details

Members are also interested in