Search talks

Black Hat · 2025black-hatadvanced

Bridging the Gap: Type Confusion and Boundary Vulnerabilities Between WebAssembly and JavaScript

Black Hat · 2025black-hatadvanced

Delivering Javascript to World+Dog

Black Hat · 2025black-hatadvanced

Discovering React2Shell: JavaScript’s Long-Awaited Deserialization Flight-mare

Lachlan Davidson

Black Hat · 2025black-hatadvanced

JS Suicide: Using JavaScript Security Features to Kill JS Security by Ahamed Nafeez

Ahamed Nafeez

Black Hat · 2025black-hatadvanced

NoJITsu: Locking Down JavaScript Engines

Black Hat · 2025black-hatadvanced

USA 2012 - Blended Threats and JavaScript: A Pland for Permanent Network Compromise

Black Hat · 2025black-hatadvanced

USA 2012 - Owning Bad Guys (and Mafia) with Javascript Botnets

Chema Alonso

Black Hat · 2025black-hatintermediate

USA 2013 - Javascript Static Security Analysis made easy with JSPrime

CODE BLUE · 2025code-blueadvanced

Abusing Adobe Reader’s JavaScript APIs by Abdul Aziz Hariri and Brian Gorenc

Black Hat · 2024black-hat-europe-2024advanced

Is JavaScript Trustworthy in Cloud Computing?

Zong Cao · Qian Zhu · Hongkun Chen · Yang Liu · Xiu Zhang

MICROSOFT · 2024microsoft-israel-r-and-d-center

BlueHat IL 2019 - Bruno Keith - Attacking Edge Through the JavaScript Just-In-Time Compiler

Bruno Keith

OFFENSIVECON · 2022offensivecon

OffensiveCon19 - Attacking Edge Through the JavaScript Just-In-Time compiler

Bruno Keith

OFFENSIVECON · 2022offensivecon

OffensiveCon19 - FuzzIL: Guided Fuzzing for JavaScript Engines

Samuel Groß

OFFENSIVECON · 2022offensivecon

OffensiveCon23 - Advancements in JavaScript Engine Fuzzing

Samuel Groß · Carl Smith