Search talks

SECURITY FEST · 2025security-fest

Abusing Mutating Admission Webhooks for Stealthy Cluster Dominance - Nikita Verma

Harshita Varma

SECURITY FEST · 2025security-fest

How to f*ck up at OAuth2 while following BCPs -Tobias Ahnoff, Pontus Hanssen

Ahnoff · Pontus Hanssen

SECURITY FEST · 2025security-fest

Olle Segerdahl - DOMXSS is not Dead

Olle Segerdahl

SECURITY FEST · 2025security-fest

Samit Anwer - Oh! Auth Implementation pitfalls of OAuth 2 0 & the Auth Providers who have fell

Samit Anwer

SECURITY FEST · 2025security-fest

Self XSS we’re not so different you and I - Mathias Karlsson

Mathias Karlsson

SECURITY FEST · 2025security-fest

Stealthy Persistence in Enterprise Environments - Alexander Andersson

SECURITY FEST · 2025security-fest

Veit Hailperin, The Tale of a Fameless but Widespread Web Vulnerability Class

CREST · 2022crest-videosadvanced

CRESTCon Europe 2024 - API Secret Tokens Exposed

Antoine Carossio

CREST · 2022crest-videosintermediate

Hunting for Security Vulnerabilities | Alexandru COLȚUNEAC (Zitec)

Alexandru COLȚUNEAC

CREST · 2022crest-videosadvanced

Penetration Testing: CSRF is dead, long live CSRF! Daniel Tomescu, Associate Manager, KPMG Romania

Daniel Tomescu · Associate Manager · KPMG Romania

CREST · 2022crest-videosadvanced

Vulnerabilities of Mass Disruption: Dor Tumarkin & Kyle Lovett, Cisco

Kyle Lovett

SECURITY FEST · 2022security-fest

Hacking JavaScript Desktop apps with XSS and RCE

Abraham Aranguren [Security Fest 2022]

SECURITY FEST · 2022security-fest

Hacking Network APIs

Dan Nagle [Security Fest 2022]