browser-exploitation

CSIT Village·38 min

• DEF CON
• Red Team
• Date: Apr 2026
• Location: Singapore

Ernest Ang

Ernest Ang explores from chrome renderer, to mouse, to system at DEF CON SG1, examining browser-exploitation and practical defenses.

CSIT Village·22 min

• DEF CON
• Red Team
• Date: Apr 2026
• Location: Singapore

Koh Kian Woon

Koh Kian Woon examines as AI accelerates development and increases system complexity, robust defence-in-depth and deep technical expertise are becoming increasingly critical for defenders.

Ekoparty Security Conference·54 min

• EKOPARTY
• Malware
• Date: 2025
• Location: Ekoparty

Moritz Jodeit

Outlines moritz Jodeit - Look Mom, practitioners dont use Shellcode: Browser Exploitation for IE 11 and evaluates key implications for security practitioners.

Eye on Tech·20 min

• EYE ON TECH
• Red Team
• Date: 2025
• Location: Eye On Tech

Industry experts analyze emerging threats surrounding How to use BeEF, the Browser Exploitation Framework.

SEC-T·29 min

• SEC T
• Red Team
• Date: 2025
• Location: Sec T

Presenters detail vulnerability discovery and exploitation in 0x0C: Jameel Nabbo - The art of browser exploitation using Assembly.

DCGVR Village·1 hr 27 min

• DEF CON
• AppSec
• Date: Aug 2022
• Location: Las Vegas

Dissecting the internals of Mozilla Firefox's Gecko rendering engine, exploring DOM fuzzing methodologies and memory corruption vulnerability classes.

Main Track 1·42 min

• DEF CON
• AppSec
• Date: Aug 2017
• Location: Las Vegas

Luke Young

Bypassing browser protections and network mitigations to reliably exploit local network services.

Main Stage·45 min

• DEF CON
• AppSec
• Date: Aug 2016
• Location: Las Vegas

Bryant Zadegan · Ryan Lester

Bryant Zadegan and Ryan Lester show how modern web standards like Service Workers and Content Security Policy headers can be subverted for client-side persistence.

Main Stage·46 min

• DEF CON
• AppSec
• Date: Aug 2015
• Location: Las Vegas

Christian Frichot

Christian Frichot integrates WebRTC peer-to-peer data channels into the Browser Exploitation Framework (BeEF), creating resilient browser botnet mesh networks.

Main Stage·25 min

• DEF CON
• AppSec
• Date: Jul 2012
• Location: Las Vegas

Adam Baldwin

Adam Baldwin details copy of the slides for this talk are here: Blind XSS Adam "EvilPacket" Baldwin Chief Security Officer, & yet.