Main Stage·38 min
Paul Gerste
Technique for bypassing prepared statements and database query validation by smuggling queries across database wire protocols.
sql-injectionprotocol-smugglingdatabase+2
3 talks tagged with this topic.
Loading filters…
1–3 of 3 talks · loading…
Main Stage·38 min
Paul Gerste
Technique for bypassing prepared statements and database query validation by smuggling queries across database wire protocols.
Main Stage·20 min
Joshua Maddux
Joshua Maddux weaponizes TLS protocol features—including session resumption and SNI parsing—to execute advanced Server-Side Request Forgery (SSRF) attacks.
Main Stage·28 min
Joshua Maddux
Joshua Maddux answers questions on weaponizing TLS protocol features for SSRF, session resumption exploitation, and mitigation.