War Stories·39 min
Thomas Boejstrup Johansen
Details a year-long investigation running eight wpad.tld domains that received over one billion DNS requests and enabled unauthenticated traffic interception.
wpadreconproxies+2
wpad
2 talks tagged with this topic.
Filters+
Loading filters…
1–2 of 2 talks · loading…
Main Stage·45 min
Alex Chapman · Paul Stone
Alex Chapman and Paul Stone unveil vulnerabilities in Web Proxy Auto-Discovery (WPAD), demonstrating forced proxy hijacking and HTTPS interception across major browsers.
wpadproxy-bypasshttps-interception+2