CSIT Village·19 min
Sim Wei Jun
Sim Wei Jun examines this presentation expands on prior research into CVE-2024-27304 through a proof-of-concept walkthrough of SQL injection at the protocol level.
sql-injectionpostgresqlprotocol-exploitation+1
AppSec
Application and API security, web exploitation, secure development.
Filters+
Loading filters…
1–24 of 3527 talks / 3621 · loading…
CSIT Village·22 min
Poh Cai Min · Shawn Pang
Poh Cai Min and Shawn Pang examines grammar-based fuzzing made painless.
fuzzingapi-securitygrammar-fuzzing+1
CSIT Village·17 min
Daryl Lim · Zhi Kai
Daryl Lim and Zhi Kai examines a thought experiment on Rolling API Tokens, leveraging the Double Ratchet Protocol to eliminate long-lived secrets through continuous key rotation.
api-securitytoken-securitycryptographic-protocols+1
CSIT Village·24 min
Sng Peng Boon
Sng Peng Boon examines we share the lessons learnt from testing government web apps - how we prioritised, and what interesting bugs appeared.
bug-bountyweb-application-securitygovernment-security+1
37th Annual FIRST Conference·32 min
Presenters detail vulnerability discovery and exploitation in Beyond CVEs: Mastering the Landscape with Vulnerability-Lookup.
cvemasteringlandscape+2
37th Annual FIRST Conference·38 min
Analysts investigate attack surfaces and defenses concerning Establishing a Global Community of Practice on Coordinated Vulnerability Disclosure (CVD).
vulnerability-disclosuredisclosureestablishing+1
37th Annual FIRST Conference·35 min
Engineers explore architecture and security mechanisms for Revolutionizing Malware Analysis with Agentic AI: Lessons and Innovations.
malware-analysisrevolutionizinganalysi+2
BalCCon - Balkan Computer Congress·1 hr 3 min
Vesna Manojlovic
Evaluates balCCon2k14 - Vesna Manojlovic - Using RIPE Atlas API for measuring IPv6 Reachability and evaluates key implications for security practitioners.
ipv6balccon2k14vesna+2
BalCCon - Balkan Computer Congress·59 min
Exploiting esoteric SQL injection vulnerabilities
Investigates balCCon2k18 - Bojan Zdrnja - Exploiting esoteric SQL injection vulnerabilities and evaluates key implications for security practitioners.
balccon2k18-bojanbojan-zdrnjazdrnja-exploiting+2
BalCCon - Balkan Computer Congress·39 min
Amit Sharma
Explores balCCon2k23 - Amit Sharma - API Security in the world of Microservices and evaluates key implications for security practitioners.
api-securitybalccon2k23amit+1
BalCCon2k25·22 min
Berat Yildiz · Hasan Ekin
Industry experts analyze emerging threats surrounding Berat Yildiz Hasan Ekin - AuthMap - Authorization Logic Mapper for Web Application Sec.
webauthorizationberat+3
BITM Hacklab·47 min
Avinash Sudhodanan
Industry experts analyze emerging threats surrounding No Hat 2020 - Avinash Sudhodanan - Cross-Origin State Inference Attacks: Leaking Web Site States.
webavinashsudhodanan+2
BITM Hacklab·33 min
David Calligaris
Industry experts analyze emerging threats surrounding No Hat 2021 - David Calligaris - The Infinite Game of Vulnerability Research.
vulnerability-researchdavidcalligari+1
Black Hat·47 min
Presenters detail vulnerability discovery and exploitation in 1000 Ways to Die in Mobile Oauth.
mobileoauthways
Black Hat·40 min
Engineers explore architecture and security mechanisms for A Decade After Stuxnet's Printer Vulnerability: Printing is Still the Stairway to Heaven.
decadestuxnetprinter+2
Black Hat·47 min
Industry experts analyze emerging threats surrounding A Dive in to Hyper-V Architecture & Vulnerabilities.
vulnerabilitiesarchitecturehyper-v
Black Hat·31 min
Analysts investigate attack surfaces and defenses concerning A New Class of DNS Vulnerabilities Affecting Many DNS-as-Service Platforms.
vulnerabilitiesdnsvulnerabilitie+1
Black Hat·56 min
Engineers explore architecture and security mechanisms for A Retrospective Case Study of VMware Guest-to-Host Escape Vulnerabilities.
vulnerabilitiesretrospectivecase-study
Black Hat·29 min
Alejandro Hernández
Presenters detail vulnerability discovery and exploitation in A Walk Through Historical Correlations Between Vulnerabilities & Stock Prices.
vulnerabilitieswalkhistorical
Black Hat·32 min
Analysts investigate attack surfaces and defenses concerning Access Keys Will Kill You Before You Kill the Password.
acceskeykill+1
Black Hat·50 min
Analysts investigate attack surfaces and defenses concerning Advanced CAN Injection Techniques for Vehicle Networks.
injectionnetworksvehicle-networks
Black Hat·23 min
Security researchers examine technical aspects of All Your Payment Tokens Are Mine: Vulnerabilities of Mobile Payment Systems.
mobilevulnerabilitiespayment-systems
Black Hat·44 min
ALPACA: Application Layer Protocol Confusion - Analyzing and Mitigating Cracks in TLS Authentication
Mitigating Cracks in TLS Authentication
Security researchers examine technical aspects of ALPACA: Application Layer Protocol Confusion - Analyzing and Mitigating Cracks in TLS Authentication.
authenticationtlsalpaca+3
Black Hat·44 min
Presenters detail vulnerability discovery and exploitation in Another Brick Off the Wall: Deconstructing Web Application Firewalls Using Automata Learning.
firewallswebanother+3