Car Hacking Village·22 min
Eaton Zveare
Reveals critical API vulnerabilities in a major automotive dealer platform that allowed national admin account creation and remote vehicle command access.
automotiveapi-securityaccess-control-bypass+2
access-control-bypass
7 talks tagged with this topic.
Filters+
Loading filters…
1–7 of 7 talks · loading…
Main Stage·35 min
Eaton Zveare · R Piyush
Reveals critical API authorization vulnerabilities in automotive dealer management systems that allowed national admin account creation and remote vehicle control.
automotiveapi-securityaccess-control-bypass+2
App Sec Village·21 min
niks · Charles Waterhouse
Reconnaissance and vulnerability discovery across enterprise banking software used by major financial institutions worldwide.
bankingbug-bountyaccess-control-bypass+2
Main Stage·36 min
Gareth Heyes
Exploiting RFC email parsing quirks and inconsistencies across web applications to bypass authentication and access controls.
email-parsingrfc-exploitationaccess-control-bypass+2
Lock Bypass Village·54 min
Bill Graydon
Examines sensor mechanisms, request-to-exit bypasses, and alarm defeat techniques on commercial access-controlled doors.
access-controlaccess-control-bypassphysical-security+1
Lock Picking Village·8 min
Steven Collins
Demonstrates the mechanics of standard ratcheting handcuffs, double-locking systems, and bypass techniques using shims and picks.
physical-securitybypasshardware+1
Lock Picking Village·23 min
Dylan The Magician
Examines building perimeter access controls, mantrap bypasses, sensor blind spots, and optical monitoring vulnerabilities.
physical-securityaccess-control-bypasslocks+1