Black Hat·25 min
Hao Xing
Security researchers examine technical aspects of The Inside Story: There are Apps in Apps and Here is How to Break Them.
insidestoryapp+1
Hao Xing
2 talks in the archive.
Filters+
Loading filters…
1–2 of 2 talks · loading…
Main Stage·40 min
Hao Xing · Zekai Wu
Hao Xing and Zekai Wu disclose a universal zero-day deserialization bypass in Fastjson, exploiting Java web services to execute RCE and drain crypto nodes.
fastjsondeserializationzero-day+2