Search talks

MICROSOFT · 2025microsoft-security-response-center-msrc

BlueHat 2026: Deserialization gone wrong: Lessons from pentests and variant hunts

MICROSOFT · 2025microsoft-security-response-center-msrc

BlueHat Asia: When servers get phished: OAuth token misbinding and server-side CSRF in social logins

MICROSOFT · 2025microsoft-security-response-center-msrc

BlueHat v17 || Dangerous Contents

Securing .Net Deserialization

MICROSOFT · 2025microsoft-security-response-center-msrc

BlueHat v18 || A mitigation for kernel toctou vulnerabilities

MICROSOFT · 2025microsoft-security-response-center-msrc

BlueHat v18 || May I see your credentials, please

ROOTCON · 2025rootcon-hacking-conference

Breaking Barriers: Using XSS to Achieve RCEby: Aden Yap, Ali Radzali, Azrul Zulkifli, Sheikh Rizan

Aden Yap · Ali Radzali · Azrul Zulkifli · Sheikh Rizan

ROOTCON · 2025rootcon-hacking-conference

Data Driven Web Hacking & Manual Testing by: Jason Haddix

ROOTCON · 2025rootcon-hacking-conference

Discover vulnerabilities with CodeQL by: Boik Su (@boik_su)

ROOTCON · 2025rootcon-hacking-conference

Farewell WAF Exploiting SQL Injection from Mutation to Polymorphism

ROOTCON · 2025rootcon-hacking-conference

Gathering Vulnerability Intel from Darkweb by: Nandakishore Harikumar

ROOTCON · 2025rootcon-hacking-conference

Identity Crisis War Stories from Authentication Failures

ROOTCON · 2025rootcon-hacking-conference

OAuth Authentication Bypass by Sheikh Rizan

ROOTCON · 2025rootcon-hacking-conference

ROOTCON 10 Certificate Based Strong Client Authentication by Lawrence E. Hughes

ROOTCON · 2025rootcon-hacking-conference

ROOTCON 10 Remote Code Execution via Java Native Deserialization by David Jorm

ROOTCON · 2025rootcon-hacking-conference

ROOTCON 10 Remote Code Execution via Java Native Deserialization by David Jorm

MICROSOFT · 2024microsoft-israel-r-and-d-center

BlueHat IL 2020 - The Wover &Ruben Boonen - Staying # & Bringing Covert Injection Tradecraft to .NET

MICROSOFT · 2024microsoft-israel-r-and-d-centeradvanced

BlueHat IL 2026 - Maor Abutbul - Why-So-QUIC!? Racing and Fuzzing HTTP/3 WebApps using QuicDraw-UI

Maor Abutbul

ROMHACK · 2022romhackadvanced

#RomHack2022 - Nestori Syynimaa - Attacking AAD abusing Synch API: The story behind 40k$ bounties

Nestori Syynimaa

ROOTCON · 2022rootcon-16

Understanding and Re creating Process Injection Techniques through Nimjector by Ariz Soriano