Search talks

HEXACON · 2025hexacon

2023 - Exploiting Hardened .NET Deserialization by Piotr Bazydło

HEXACON · 2025hexacon-2025

Crash One: A StarBucks Story (CVE-2025-24277) by Csaba Fitzl & Gergely Kalman

Csaba Fitzl · Gergely Kalman

HITB · 2024hack-in-the-box-security-conference

#HITB2012AMS D2T1 - A. Bazhanyuk and N. Tarakanov - Automatically Searching for Vulnerabilities

A. Bazhanyuk · N. Tarakanov

HITB · 2024hack-in-the-box-security-conference

#HITB2012AMS D2T1 - Kenneth White - A Deep Analysis of Amazon Web Services

Kenneth White

HITB · 2024hack-in-the-box-security-conference

#HITB2012KUL D1T1 - Chris Wysopal - Data Mining a Mountain of Vulnerabilities

Chris Wysopal

HITB · 2024hack-in-the-box-security-conference

#HITB2012KUL D1T2 - Meder Kydyraliev

Defibrilating Web Security

HITB · 2024hack-in-the-box-security-conference

#HITB2012KUL D2T1 - Katie Moussouris - How to Get Along With Vendors Without Really Trying

Katie Moussouris

HITB · 2024hack-in-the-box-security-conference

#HITB2012KUL D2T1 - Shreeraj Shah - XSS & CSRF Strike Back -- Powered by HTML5

Shreeraj Shah

HITB · 2024hack-in-the-box-security-conference

#HITB2012KUL D2T2 - Jeremiah Grossman - Why Web Security is Fundamentally Broken

Jeremiah Grossman

HITB · 2024hack-in-the-box-security-conference

#HITB2013AMS D1T1 Petko D Petkov - Defeating the Intercepting Web Proxy

HITB · 2024hack-in-the-box-security-conference

#HITB2013AMS D1T1 V. Vorontsov and A. Golovko - SSRF PWNs - New Techniques and Stories

SSRF PWNs

HITB · 2024hack-in-the-box-security-conference

#HITB2013AMS D2T1 Andrey Labunets and Egor Homakov - OAuth 2.0 and the Road to XSS

Andrey Labunets · Egor Homakov

HITB · 2024hack-in-the-box-security-conference

#HITB2016AMS D1T1 - TeLeScope: Peering Into The Depths Of TLS Traffic In Real Time

Radu Caragea

HITB · 2024hack-in-the-box-security-conference

#HITB2016AMS D1T1 - Virtualization System Vulnerability Discovery Framework

Tang Qinghao

HITB · 2024hack-in-the-box-security-conference

#HITB2017AMS D1T1 - Harnessing Intel Processor Trace On Windows For Vuln Discovery

Richard Johnson

HITB · 2024hack-in-the-box-security-conferenceadvanced

#HITB2017AMS D2T1 - Hunting For Vulnerabilities In Signal

Markus Vervier

HITB · 2024hack-in-the-box-security-conference

#HITB2018AMS D2T2 - Defense-in-Depth Techniques for Modern Web Apps

M. Spagnuolo · L. Weichselbaum

HITB · 2024hack-in-the-box-security-conference

#HITB2018DXB D2T2: Using Machine-Learning To Investigate Web Campaigns At Large

Federico Maggi

HITB · 2024hack-in-the-box-security-conference

#HITB2021AMS D2T1 - How I Found 16 Microsoft Office Excel Vulnerabilities In 6 Months

Quan Jin

HITB · 2024hack-in-the-box-security-conference

#HITB2021AMS D2T2 - Hack Out Of The Box: Discovering 10+ Vulnerabilities In VirtualBox

Chen Nan

HITB · 2024hack-in-the-box-security-conference

#HITB2021SIN D1T2 - Is Attestation All We Need? Fooling Apple’s AppAttest API

Igor Lyrchikov

HITB · 2024hack-in-the-box-security-conference

#HITB2023AMS #COMMSEC D1 API Security In The Age Of Microservices

Ali Abdollahi

HITB · 2024hack-in-the-box-security-conference

#HITB2023HKT #COMMSEC D2 - A Practical Method Of Finding Vulnerabilities In IoT

IeckChae Euom

HITB · 2024hack-in-the-box-security-conference

#HITB2023HKT D1T1 - Injecting Brains Into Blind SQL Injection

Jakub Pruzinec · Quynh Anh Nguyen