Nestori Syynimaa

6 talks in the archive.

Filters+

Loading filters…

1–6 of 6 talks · loading…

Sort

Ekoparty 2025·55 min

EKOPARTY
Red Team
Date: 2025
Location: Ekoparty

Deep-dive to Entra ID Token Theft Protection

Nestori Syynimaa

Nestori Syynimaa details Deep-dive to Entra ID Token Theft Protection.

entra-idtoken-theftdeep-dive+3

Ekoparty Security Conference·27 min

EKOPARTY
Blue Team
Date: 2025
Location: Ekoparty

Nestori Syynimaa I Lado B Ekoparty 2025

Nestori Syynimaa

Outlines nestori Syynimaa practitioners Lado B Ekoparty 2025 and evaluates key implications for security practitioners.

nestorisyynimaalado

BlueHat·40 min

COMMUNITY
Community
Date: 2023
Location: Community

From the Trenches: Working with MSFT as a Researcher with Dr Nestori Syynimaa

Nestori Syynimaa

Presenters detail vulnerability discovery and exploitation in From the Trenches: Working with MSFT as a Researcher with Dr Nestori Syynimaa.

trenchemsftresearcher+2

Main Stage·34 min

DEF CON
Cloud
Date: Aug 2023
Location: Las Vegas

From Feature to Weapon: Breaking Microsoft Teams and SharePoint

Nestori Syynimaa

Dr. Nestori Syynimaa abuses SharePoint Online migration APIs to tamper with files, inject stored XSS, and escalate privileges across Microsoft Teams and Azure AD.

sharepointteamsazure-ad+2

BruCON Security Conference·44 min

BRUCON
Red Team
Date: 2022
Location: Brucon

09 - BruCON 0x11 - Deep-dive to Entra ID Token Theft Protection

Nestori Syynimaa

Nestori Syynimaa explores 09 - BruCON 0x11 - Deep-dive to Entra ID Token Theft Protection.

entra-idtoken-theftdeep-dive+1

RomHack·31 min

ROMHACK
AppSec
Date: 2022
Location: Romhack

#RomHack2022 - Nestori Syynimaa - Attacking AAD abusing Synch API: The story behind 40k$ bounties

Nestori Syynimaa

Demonstrates #RomHack2022 - Nestori Syynimaa - Attacking AAD abusing Synch API: The story behind 40k$ bounties and evaluates key implications for security practitioners.

romhack2022-nestorinestori-syynimaasyynimaa-attacking+2