Black Hat·46 min
Orange Tsai
Engineers explore architecture and security mechanisms for ProxyLogon is Just the Tip of the Iceberg: A New Attack Surface on Microsoft Exchange Server!.
attack-surfaceexchangeproxylogon+2
Orange Tsai
12 talks in the archive.
Filters+
Loading filters…
1–12 of 12 talks · loading…
Black Hat·34 min
Orange Tsai
Analysts investigate attack surfaces and defenses concerning Put in One Bug and Pop Out More: An Effective Way of Bug Hunting in Chrome.
chromeeffectivehunting
Black Hat Europe 2024·40 min
Orange Tsai · Splitline Huang
Industry experts analyze emerging threats surrounding WorstFit: Unveiling Hidden Transformers in Windows ANSI!.
windowsworstfitunveiling+3
Black Hat USA·38 min
Orange Tsai
Engineers explore architecture and security mechanisms for Confusion Attacks: Exploiting Hidden Semantic Ambiguity in Apache HTTP Server!.
confusionattackexploiting+3
Hack In The Box Security Conference·38 min
Orange Tsai
Orange Tsai analyzes #HITB2019AMS D2T1 - Hacking Jenkins.
hitb2019amd2t1jenkin+2
Hack In The Box Security Conference·50 min
Orange Tsai
Orange Tsai analyzes #HITBGSEC 2017 SG Conf D1 - A New Era Of SSRF - Exploiting Url Parsers.
ssrfhitbgsecconf+2
Hack In The Box Security Conference·57 min
Orange Tsai · Tingyi Chang
Orange Tsai explores #HITBGSEC D1: A Pre-Auth RCE On Leading SSL VPNs.
rcepre-authhitbgsec+3
RomHack·58 min
Orange Tsai
Outlines orange Tsai - Un racconto di 3 anni sullhacking di un obiettivo Pwn2Own: evoluzio and evaluates key implications for security practitioners.
pwn2ownorangetsai+2
Main Stage·47 min
Orange Tsai
Orange Tsai presents groundbreaking research into Microsoft IIS hash table implementations, weaponizing cache collisions and memory layout manipulation for RCE.
iishash-tablecache+2
Main Stage·48 min
Orange Tsai
Orange Tsai reveals a revolutionary attack surface on Microsoft Exchange Server, chaining pre-auth SSRF, authentication bypass, and post-auth RCE into ProxyLogon, ProxyOracle, and ProxyShell.
proxylogonexchangerce+2
Main Stage·46 min
Orange Tsai
Discovers critical pre-authentication remote code execution vulnerabilities in three leading enterprise SSL VPN products.
vpnssl-vpnpre-auth-rce+2
Main Stage·43 min
Orange Tsai
Orange Tsai presents breaking parser logic take your path normalization off and pop 0days out: We propose a new exploit technique that brings a whole-new attack surface to defeat path normalization, which is complic...
path-traversalnormalizationweb-security+1