0x28 Wellington Meetup with a crash course on web security headers

We’re excited to bring another interactive Hack the Box (HTB) meetup to Wellington! Our speaker for this event is Jake who will be presenting on web security headers: what are they and how can we exploit them?

You've written a pentest report and right down the bottom you've got the obligatory 'CSP misconfigured', 'HSTS missing preload', 'Missing security headers'. You've thrown them in cause Burp or Nikto told you to, but why are these an issue? This talk will walk you through a few of the most common security headers, how they work, the attacks they mitigate, and some ways we can exploit poor configuration.

WHAT TO EXPECT

A presentation on the topic mentioned prior.
A hands-on, guided walk through to solve a Hack The Box machine yourself.

WHAT YOU GET

FREE HTB SWAG/GIVEAWAYS
FREE access to HTB machines during the event

WHAT YOU NEED

A laptop
A HTB account
Discord application

HOUSE RULES

Follow all rules and guidelines in the HTB TOS: HTB Terms of Service
Active HTB content cannot be shared publicly. Retired challenges or machines are fair game.

EVENT DETAILS

Date: Tuesday, 27th October 2026
Time: 5:30 PM (NZDT)
Location: InternetNZ - Level 13/18 Willis Street, Wellington Central, Wellington 6011
Attendee limit: 30 + speakers, and hosts.

ADDITIONAL NOTES

Join our Discord for event updates

CODE OF CONDUCT
We strive to create a safe, welcoming, and inclusive environment for all attendees. To ensure a positive experience for everyone, the following behaviors are strictly prohibited:

Smoking
Drinking alcohol
Any form of discrimination or racism
Any other forms of misconduct

Any attendee found engaging in these behaviours will be immediately banned and permanently removed from the group. Thank you for helping us maintain a respectful and enjoyable atmosphere for all.