Main Stage·46 min
Mikhail Shcherbakov
Advanced JavaScript and TypeScript exploit primitives turning theoretically unexploitable flaws in Kibana into working code execution.
kibanabug-bountyprototype-pollution+2
Mikhail Shcherbakov
3 talks in the archive.
Filters+
Loading filters…
1–3 of 3 talks · loading…
Black Hat Asia·40 min
Mikhail Shcherbakov
Presenters detail vulnerability discovery and exploitation in Prototype Pollution Leads to RCE: Gadgets Everywhere.
rceprototype-pollutionprototype+3
Main Stage·20 min
Mikhail Shcherbakov · Musard Balliu
Mikhail Shcherbakov and Musard Balliu uncover universal Prototype Pollution gadgets within Node.js core and popular NPM packages, achieving RCE across major applications.
prototype-pollutionnodejsrce+2