Track 3
Shows how to move past ordinary bug hunting toward finding a server-side request forgery worth a bounty.
bug-bountywebappsec+1
Track 3 CC12
Mesa, AZ, USA · February 2024 · 12 talks
Track 3 talks from CactusCon 12 2024.
1–12 of 12 talks
Track 3·45 min
Mike Landeck
Shows how browsers get fingerprinted and tracked by third-party systems, and practical steps to limit that exposure.
privacywebrisk+2
Track 3·59 min
Craig
Shows how anomaly detection and conventional queries can surface cloud data exfiltration hidden among normal API activity.
cloudthreat-detectionmachine-learning+2
Track 3·56 min
pr0b3r7 · Josh Huff
Shows how a red team deploys, configures and secures C2 infrastructure, and automates it with infrastructure as code.
attackinfrastructureautomation+2
Track 3·50 min
Eli Woodward
Explains how states and commercial vendors use iPhone zero-days to pursue geopolitical goals, and what that means for defenders.
intelligencethreatmobile+2
Track 3·24 min
Anthony Kosednar · Danielle Jamieson · Nate Thornton
Shows how to write incident updates for executives that drop jargon, stick to facts and focus on business impact.
incident-responsemanagementrisk+2
Track 3·29 min
Kyle Nordby
Shows how remote management tools leave forensic traces and which artifacts help investigators confirm their use.
incident-responsehuntingtool+2
Track 3·57 min
Matt Edmonson
Shows how breach dumps and infostealer logs can be searched and used to answer investigative and defensive questions.
intelligencethreatprivacy+2
Track 3·56 min
Erica
Shows how small, separate flaws combine into critical exploit chains, from file upload abuse to SQL injection and command injection.
exploitationchainweb+2
Track 3·59 min
Larry Pesce
Shows how software bills of materials, enriched with CVE and threat data, can expose attack paths in embedded devices.
supply-chainvulnerabilitiesiot+2
Track 3·42 min
Scott McAllister
Surveys how webhook providers verify senders and shows practical checks consumers can add to incoming events.
webapplicationtrust+2
Track 3
Explores how ChatGPT can be applied to penetration testing work.
aiattacktool+1