Michael Stepankin

Ekoparty 2024·31 min

• EKOPARTY
• Community
• Date: 2024
• Location: Ekoparty

Michael Stepankin

Michael Stepankin investigates Breaking corporate Maven repositories.

Black Hat USA·22 min

• Black Hat
• AppSec
• Date: 2023
• Location: Black Hat

Michael Stepankin

Industry experts analyze emerging threats surrounding mTLS: When Certificate Authentication is Done Wrong.

Main Stage·19 min

• DEF CON
• AppSec
• Date: Aug 2023
• Location: Las Vegas

Michael Stepankin

Michael Stepankin analyzes implementation flaws in mutual TLS (mTLS) certificate authentication, detailing CVEs in open-source identity servers leading to impersonation.

Main Stage·16 min

• DEF CON
• AppSec
• Date: Aug 2019
• Location: Las Vegas

Michael Stepankin

Discovers Solr injection, a new web attack class targeting Apache Solr search parameters to achieve SSRF and remote code execution.