Main Stage·20 min
Joshua Maddux
Joshua Maddux weaponizes TLS protocol features—including session resumption and SNI parsing—to execute advanced Server-Side Request Forgery (SSRF) attacks.
tlsssrfprotocol-smuggling+2
Joshua Maddux
3 talks in the archive.
Filters+
Loading filters…
1–3 of 3 talks · loading…
Main Stage·28 min
Joshua Maddux
Joshua Maddux answers questions on weaponizing TLS protocol features for SSRF, session resumption exploitation, and mitigation.
tlsssrfprotocol-smuggling+2
Main Stage·41 min
Joshua Maddux
Discovers widespread SSRF vulnerabilities introduced by Apple Pay merchant validation requirements in e-commerce applications.
ssrfapplepayapi-security+2