My first trip to DefCon was driven by wanting to attend this talk. I had to watch it on DefCon TV, as the room was packed. Unfortunately, the docs were not present on the DC CD. So, I had to watch a lot of people running demos, without seeing the demos themselves, and of course listen to the talk with no slides.
Anyway, here are the DefCon slides:
https://community.rapid7.com/docs/DOC-1504And here is the long awaited Whitepaper on testing web services:
https://community.rapid7.com/docs/DOC-1505The Web Application Hackers Handbook is supposed to be updated to cover web services... I should have my copy by the end of the week... Would be nice to have now, as I'm in the middle of a pen test that's employing JSON.
Anyway... happy reading!
