Kyiv



= About =

Who are we
OWASP Kyiv chapter was founded in 2017 by [mailto:vlad.styran@owasp.org Vlad Styran] and [mailto:ihor.bliumental@owasp.org Ihor Bliumental]. The chapter aims at holding quarterly meetups in the format of 2 practical workshops and up to 5 talks.

How to find us
Follow our news and announcements on social media: Facebook & Twitter

Find us on the semi-official OWASP Slack channel #chapter-ua

Watch recordings of our previous events YouTube

Join the chapter Mailing List or browse the Archives

Personal supporter
You can become a chapter supporter by making a donation via PayPal.

You can also become an Individual OWASP Member. Make sure you choose to support OWASP Kyiv chapter!

Corporate supporter
If your company wishes to support the chapter, please review and agree with OWASP Membership terms and conditions and contact [mailto:vlad.styran@owasp.org Vlad Styran]. The funds donated are divided with 90% directly supporting the OWASP local chapter and 10% to the OWASP Foundation.

For donations in USD click here:

For donations in EUR click here:

If you require an invoice or would like to pay via wire transfer, please let us know using this form.

= Future Events =

Become a Speaker
Call For Speakers at OWASP Kyiv events is permanently open. If you want to present at future events, review and agree with the OWASP Speaker Agreement and send the title and abstract of your talk and speaker bio to [mailto:vlad.styran@owasp.org Vlad Styran] or [mailto:ihor.bliumental@owasp.org Ihor Bliumental].

Chapter Meetup Spring 2018
Date Mar 3, 2018

Location Sky Point (Ciklum Kyiv, 20th floor): 12 Amosova street, Horizon Park business center, Kyiv, Ukraine

Program
Morning Workshops (09-30) Afternoon Talks (12-30) Registration opens on Feb 1, 2018.
 * 1) Serhii Korolenko - Crack The Hash Workshop.
 * 2) Vlad Styran - Pentesting Android Apps.
 * 1) Vlad Styran - OWASP Kyiv 2017 Results and 2018 Plans.
 * 2) Vlada Kulish - Why So Serial? Threats to Modern Serialization Capabilities.
 * 3) Roman Borodin - ISC2 & ISACA Certifications First-hand Experience.
 * 4) Ihor Bliumental - WebSocket Security.
 * 5) Oleksii Dorogan - A Struggle to Start a Bug Bounty for a .gov.ua.
 * 6) Yevhen Teleshyk - Phishing Threats to Cloud Users.

= Past Events =

Chapter Meetup Winter 2017
Date Dec 2, 2017 Location Student Center of State University of Telecommunications, 7 Solomianska Street, Kyiv, Ukraine

Program
Morning Workshops Afternoon Talks Photo album by Serhiy Rekun
 * 1) Kyrylo Hobrenyak - Bash Scripting 101 | Video
 * 2) Vladyslav Makalish & Ivan Berdnik - Cloud Security at AWS | Video
 * 1) Anastasiia Vixentael - Don’t Waste Time on Learning Cryptography: Better Use It Properly | Video | Slides
 * 2) Pavel Radchuk - SAMM: Understanding Agile in Security | Video | Slides
 * 3) Vlad Styran - Security Economics | Video | Slides
 * 4) Dima Kovalenko - Modern SSL Pinning | Video | Slides
 * 5) Ivan Vyshnevskyi - Not So Quiet git push | Video | Slides

Event writeup by Ivan Vyshnevskyi

Chapter Meetup Fall 2017
Date Sep 9, 2017 Location Student Center of State University of Telecommunications, 7 Solomianska Street, Kyiv, Ukraine

Program
Morning Workshops Afternoon Talks Photo album by Serhiy Rekun
 * 1) Vlad Styran - "Hidden" Features of the Tools We All Love | Video | Slides
 * 2) Ihor Bliumental - Collision CORS | Video | Slides
 * 1) Serhiy Korolenko - The Strength of Ukrainian Users’ P@ssw0rds2017 | Video | Slides
 * 2) Lidiia 'Alice' Skalytska - Security Checklist for Web Developers | Video | Slides
 * 3) Volodymyr Ilibman - Close look at Nyetya investigation | Video | Slides
 * 4) Viktor Zhora - Cyber and Geopolitics: Ukrainian factor | Video | Slides
 * 5) Andriy Shalaenko - GO security tips | Video | Slides

Chapter Kick-off Meeting
Date May 27, 2017 Location Smartworking "SAD", 3, Oleksandra Dovzhenka str., Kyiv, Ukraine, 03057

Program

 * 1) Vlad Styran - Chapter Introduction and the 2017 Plan.
 * 2) Ihor Bliumental - Is there life outside OWASP Top-10? Real-life bugs that didn't make the list (yet) | Video | Slides
 * 3) Roman Rott - Ruby for Pentesters | Video | Slides
 * 4) Taras Bobalo - Application Security automation with DevOps tools and Clouds | Video | Slides
 * 5) Tim Karpinsky - OpSec! Not the PoopSec