Search talks

MICROSOFT · 2025microsoft-security-response-center-msrc

BlueHat 2026: Deserialization gone wrong: Lessons from pentests and variant hunts

MICROSOFT · 2025microsoft-security-response-center-msrc

BlueHat Asia: When servers get phished: OAuth token misbinding and server-side CSRF in social logins

MICROSOFT · 2025microsoft-security-response-center-msrc

BlueHat v17 || Dangerous Contents

Securing .Net Deserialization

MICROSOFT · 2025microsoft-security-response-center-msrc

BlueHat v18 || A mitigation for kernel toctou vulnerabilities

MICROSOFT · 2025microsoft-security-response-center-msrc

BlueHat v18 || May I see your credentials, please

MICROSOFT · 2024microsoft-israel-r-and-d-center

BlueHat IL 2020 - The Wover &Ruben Boonen - Staying # & Bringing Covert Injection Tradecraft to .NET

MICROSOFT · 2024microsoft-israel-r-and-d-centeradvanced

BlueHat IL 2026 - Maor Abutbul - Why-So-QUIC!? Racing and Fuzzing HTTP/3 WebApps using QuicDraw-UI

Maor Abutbul

AUSCERT · 2022auscertadvanced

Conference Day 2 - LOG4SHELL: A BRIEF HISTORY OF JAVA DESERIALIZATION VECTORS

AUSCERT · 2022auscertadvanced

2016 Day 1 David Jorm, Console CVE is logjammed

David Jorm

AUSCERT · 2022auscertadvanced

2016 Day 2 Hanno Böck The burden of faulty TLS implementations

Hanno Böck

AUSCERT · 2022auscertintermediate

2018 Day 2 Piero DePaoli: Todays State of Vulnerability Response

Piero DePaoli

AUSCERT · 2022auscertadvanced

2018 Day 2 Sarwar Jahan Munna: How to Bypass Authentication and Authorization

Sarwar Jahan Munna

AUSCERT · 2022auscertadvanced

2023 - TLS OR GTFO (Analysis of SMTP TLS Implementations)

Jamie Gillespie

AUSCERT · 2022auscertintermediate

2024 - From Passwords to Password[less] - A case for passkeys in a new GenAI world

AUSCERT · 2022auscertadvanced

HD Moore - Global Vulnerability Analysis

HD Moore