**OWASP Leiria** is excited to invite you to an engaging (online) evening filled with technology insights, networking opportunities, and inspiring discussions.

📅 **Date:** December 18th, 2025
🕕 **Time:** 6:30PM-8:15PM GMT
📍 **Location:** Online (StreamYard)
📍 **Register now:** https://streamyard.com/watch/rPZsjq7tigQy

**Agenda:**
**6:30PM – Event Opening**
🎙️ Hosted by Teresa Pereira (Leader @ OWASP Leiria)

**6:40PM – Instant API Hacker**
👨‍💻 Corey Ball (CEO & Founder @ hAPI Labs, APIsec University Founder)
Abstract: "Instant API Hacker" is a fast-paced, 30-minute presentation that demonstrates how quickly someone can learn to identify and exploit API vulnerabilities. Led by Corey Ball, author of "Hacking APIs" and founder of APIsec University and hAPI Labs. This talk provides a practical introduction to API security testing using real-world tools and techniques. Attendees will witness the exploitation of critical vulnerabilities from the OWASP API Security Top 10, including broken authentication, authorization flaws (BOLA), and excessive data exposure. Through live demos using the crAPI vulnerable lab, participants will see firsthand how APIs can be compromised and gain actionable insights they can apply immediately. The presentation concludes with free resources for continued learning, including access to vulnerable labs and APIsec University courses.

**7:15PM – The AppSec Poverty Line: Minimal Viable Security**
👨‍💻 Tanya Janca (Trainer, Keynote Speaker, Best Selling Author - Alice and Bob Learn Secure Coding & Application Security)
Abstract: Not every team has a security budget. Not every project has a dedicated AppSec engineer. But every product exposed to the internet needs some level of security to survive.
This talk explores what I call “The AppSec Poverty Line” also known as ‘Minimal Viable Security” — the minimum viable set of practices, tools, and cultural shifts that under-resourced dev teams can adopt to meaningfully improve application security. Whether you're a startup with no security hires, an independent dev, or part of a team that doesn’t have a security budget, this talk will help you prioritize what actually matters.
We’ll cover practical approaches to getting from zero to secure-ish, with a focus on:
• Training developers to write more secure code, and spot unsafe code
• Cultivating a security-positive culture
• Leveraging open-source tools that punch above their weight
• Knowing when “good enough” really is enough — and when it’s not
Attendees will leave with a roadmap for building real-world security into their product lifecycle — without breaking the bank or burning out the team. Because even if you’re below the AppSec poverty line, you don’t have to be defenseless.

**8:10PM – Event Closing** 🍻

🎟️ **Reserve Your Spot:** Don’t miss this incredible opportunity!

We can’t wait to see you there! 🚀

OWASP Leiria Chapter

Teresa Pereira

Pedro Fortuna

Sérgio

Pieter

Eduardo Margarido

Afonso

fmarquesslopes

Ali Hassan

Ricardo

Manuel T. Gomes

Thamrius

Lieblingswelt

João Duarte

OWASP Leiria Meetup #4 - Leiria Does Not Exist

Online event

Join us for two engaging sessions where our speakers walk us through the latest updates in OWASP’s security standards, including the improvements in ASVS and AISVS. Together, we’ll explore what’s changed, why these updates matter, and how they support stronger, more secure applications and AI systems.

OWASP Cairo Chapter

Haneen_Hobab

Rana Ayman El-Gammal 

Hady Ibrahim

Rawan Osama

Omar

Amin Ezzy

Ahmed AA

Ahmed khaled 

Mohammad Fouad

Amr Khalaf

ahmedhabash27

ahmedeid12563

Faisal Albuloushi

alsaeedaziz323

ALsaeed Aziz

kholoudahmed305

ahmedabdelghany74758

Kareem Diaa Helal Fouad

Hagar

Rana Saeed

OWASP Project Highlight: AISVS & ASVS New Version

**Lessons from npm's Dark Side: These Are Not the Packages You're Looking For**

Malware is all about scale and time: How can I hit the most people in the shortest time? But not all ecosystems are equally vulnerable. The JavaScript ecosystem, particularly its package manager npm, is arguably the most vulnerable to supply chain malware attacks. And with JavaScript being the language of the web, this is a problem that impacts an estimated 27.4 million developers. So what are we to do? In this session learn about:

* Why attackers target JavaScript/npm
* A case study of 5 attacks
* Whether we can trust maintainers to adopt security controls (research!)
* What you can do to protect yourself and your company from malware

**What to Expect**

* Introductions and Updates on chapter events and engagement ideas
* Primary presentation
* Network with fellow professionals who care about building and securing great software.
* **Food & Drink provided for in-person attendees! (please RSVP to ensure accurate head count)**

(\* OWASP does not endorse or recommend commercial products or services, allowing our community to remain vendor neutral with the collective wisdom of the best minds in software security)

**Event Details**
📍 **Location:** RubinBrown, 7676 Forsyth Blvd., Suite 2100, Saint Louis, MO 63105
🗓 **Date/Time:** January 13, 2025 / 6:00pm CDT

ℹ️ **Parking Directions:**

* Google map to “North Lyle Avenue & Forsyth Boulevard, Clayton, MO 63105” Link: https://maps.app.goo.gl/WYqyZ3Jv9cUBBF289
* Enter the **Parking Garage #4** (from Forsyth Blvd) next to Dry Bar
* **Pull a ticket at the gate** and proceed into the garage, turning right.
* Up the ramp is visitor parking. **You may have to go up past the 6th floor.**
* **Take elevator to \*L** (Lobby of Centene Plaza C)
* Check in at the OWASP sign-in table in the lobby; you'll be escorted up
* **Bring your parking ticket with you** to get validated at the meetup.

**Who Should Attend**

* Application & security professionals
* Software engineers and developers
* IT leaders and managers
* Anyone with an interest in application security

**About OWASP**
The Open Worldwide Application Security Project (OWASP) is a nonprofit foundation dedicated to improving the security of software. Local chapters provide opportunities to learn, network, and collaborate with others in the field.

Come to learn more and participate in OWASP Saint Louis - your voice will continue to help shape what OWASP Saint Louis becomes next.

OWASP Saint Louis Chapter

Andre Van Klaveren

Nathan Byrd

Jeremy H.

Jerold (Jay) Anbarasan

Rhonna Novy

Christopher Byrd

Leaman Brown

madatom2002

Patrick Carra

sanfordtyler3

Matt L

Matt Staebel

David Brunkow

Larry

Lessons from npm's Dark Side: These Are Not the Packages You're Looking For

RubinBrown

OWASP Porto Chapter meetup: #9 - The Wall, January 14th, 2026 at 18:00. With support from **Kuehne + Nagel**

**Agenda:**
18:00 - Intro and Welcome by the OWASP Porto chapter leadership 18:15 - Too Many Repos, Too Little Time: How We Learned to Security Test Smarter by Arnau Estebanell Castellví
19:00 - Baseband: The Final (?) Frontier by Pedro Ribeiro
20:00 - Dinner and Drinks

**Talks:**

**Too Many Repos, Too Little Time: How We Learned to Security Test Smarter**

By **Arnau Estebanell Castellví**

Abstract: Over four years at my current company, I witnessed our security team grow from four people to nearly thirty — and with that growth came the challenge (and opportunity) to build an Offensive Security Program and SSDLC essentially from scratch. This talk tells the real story behind that journey: the messy iterations, the fast failures, and the cultural battles that mattered far more than any tool we deployed. I’ll share how we moved from our very first customer‑facing pentest report to a full Offensive Security Program powered by structured pentesting and a public bug bounty. Along the way, I’ll dive into the mistakes we made — like overwhelming engineering teams with mountains of vulnerabilities — and how these failures reshaped our approach to prioritization, communication, and partnership. The talk is aimed at early‑career AppSec engineers and anyone trying to bootstrap an AppSec function. Expect practical insights grounded in real experience, wrapped in stories of what actually worked in a fast‑growing engineering organization. To close, I’ll introduce two open‑source tools born directly from our struggles: pentest‑scheduler and git‑repo‑downloader. Built to answer a simple but painful question — “What should we pentest next?” — these tools help teams prioritize repositories based on real code changes and ship safer software, sooner. Bio: Arnau Estebanell Castellví is a Lead Security Engineer specializing in ethical hacking, application security, and DevSecOps. With experience leading offensive security work and helping engineering teams build secure software, he brings a practical, people‑focused approach to modern AppSec. He holds several certifications including OSCP, OSWE, and CCSK.

Linkedin: [https://www.linkedin.com/in/arnauec/](https://www.linkedin.com/in/arnauec/)

\-\-\-\-\-\-\-\-\-

**Baseband: The Final (?) Frontier**
By **Pedro Ribeiro**

Abstract:
Basebands, basebands, basebands. You heard the term before. But what is a baseband really? They can also be called "modems" - they module and demodulate radio signals into / from data packets, that get processed by your smartphone (smart car, smart meter, smart ); they allow your device to communicate with the world.

Recently there has been a surge in baseband interest in cyber security, but it is still hard to find decent public information on this deep technical subject.

Join us for a talk on their inner workings, how vulnerabilities can be found, how exploits for them work and much more!

Bio:
Pedro Ribeiro is the Founder & Director of Research at Agile Information Security, a UK based boutique cyber security firm, specialising in highly technical subjects such as vulnerability research, reverse engineering, advanced penetration testing, red teaming and incident response. He has over 7 years of working experience with basebands and regularly gives training courses on attacking them all over the world.

Linkedin: [https://www.linkedin.com/in/pedro-ribeiro-36a63324/](https://www.linkedin.com/in/pedro-ribeiro-36a63324/)

OWASP Porto Chapter

Nikhil Shirsath

Nuno Pereira

Wilberto Filho

Samuel Rocha

Clarisse Carvalho

George

João Amorim

Luís Teles

Antonio Vaz

José Gonçalves

shijo

Oleksii Levzhynskyi

Jakub

Xavier Mota

Eunice Amorim

Edgar Silva

José Afonso

#9 - The Wall

Kuehne + Nagel Porto IT Hub

This OWASP Aarhus meetup is co-hosted with PWC. By signing up, you consent to us sharing your name with PWC solely for the purpose of visitor pass registration.

PWC will provide food and drinks for this event and be sure to bring a laptop to participate in the Capture-the-flag.

**Want to learn about hacking LLMs?**
Kevin Joensen is the founder of Baldur Security and will be joining us to do a repeat of the event, that he did for OWASP København.

Kevin has more than 10 years expirence with offensive security and published more than 30+ CVEs and 300+ accepted bugbounty reports.
He will tell us about the recent challenge he made where he invited our community to hack the LLM he created.

He'll talk about the basics of hacking LLMs, how he made the BSides CTF, how to defeat it - and how you can (try) to hack the new LLM CTF he created!

**Agenda**
19:00: Welcome by OWASP Aarhus and PWC
19:10: A short introduction to PWC
19:10: Talk about common vulnerabilities and misconfigurations seen in LLM/AI enabled systems.
20:00: Network break
20:30: LLM CTF
21:30: Ending the event - Altough it will be possible to stay a bit longer and work on the CtF or network.

Parking is available at PWC but you need to register on the tablet in the reception

OWASP Aarhus Chapter

Dennis Perto

Thomas Ljungberg Kristensen

Daniel B Christensen

Jørn Nielsen

Peter

Anna Andersen

Joachim Berg

Manuel Schandorff

Paw Friis

Nis Peder Bonde

Kasper Hald

Niels Kjær

Jakub Horváth

Nikolaj Berg

Esen Akkemik Pedersen

Othman Amin

Julie A H

Kasper Broegaard Simonsen

Jan Grinderslev Laursen

Julius Pazitka

OWASP Aarhus Chapter Meeting - January

OWASP Foundation 

Grupos

{PRO_NETWORK_NAME} está no Meetup Pro com mais de {PRO_MEMBER_COUNT} membros em {PRO_GROUP_COUNT} Meetups em todo o mundo. Meetup Pro é a ferramenta profissional para organizar e comunicar uma rede de usuários, parceiros, colaboradores e membros.

The  OWASP® is a thriving global community that drives visibility and evolution in software safety and security. We are a community of like-minded security and development professionals who discuss security from various perspectives with their local peers and our worldwide community. You can learn more about OWASP, our open-source projects, and our current activities at www.owasp.org.  

You can support OWASP by becoming an individual or corporate member here: https://owasp.org/membership/.

For further information, visit the https://owasp.org/contact

The OWASP® Word Mark and Design™ Logo are registered or unregistered service marks of OWASP Foundation, Inc. in the United States and other countries. All rights reserved. Unauthorized use is strictly prohibited.


OWASP® Foundation

OWASP Foundation

OWASP Global AppSec EU 2026 Vienna

Quem nós somos

Próximos eventos

Quem nós somos

Grupos