Search talks

BALCCON · 2025balccon2k25advanced

Berat Yildiz Hasan Ekin - AuthMap - Authorization Logic Mapper for Web Application Sec

Berat Yildiz · Hasan Ekin

COMMUNITY · 2025bitm-hacklabadvanced

No Hat 2020 - Avinash Sudhodanan - Cross-Origin State Inference Attacks: Leaking Web Site States

Avinash Sudhodanan

Black Hat · 2025black-hatadvanced

Another Brick Off the Wall: Deconstructing Web Application Firewalls Using Automata Learning

Black Hat · 2025black-hatadvanced

API-Induced SSRF: How Apple Pay Scattered Vulnerabilities Across the Web

Black Hat · 2025black-hatadvanced

Fingerprinting Web Application Platforms by Variations in PNG Implementations

Black Hat · 2025black-hatadvanced

Game of Chromes: Owning the Web with Zombie Chrome Extensions

Zombie Chrome Extensions

Black Hat · 2025black-hatadvanced

Internal Affairs: Hacking File System Access from the Web

Matthew Weeks

Black Hat · 2025black-hatadvanced

Reflected File Download

A New Web Attack Vector

Black Hat · 2025black-hatadvanced

Server-Side Template Injection: RCE For The Modern Web App

Black Hat · 2025black-hatadvanced

USA 2004 - Evasion and Detection of Web Application Attacks

K.K. Mookhey

Black Hat · 2025black-hatadvanced

USA 2012 - Confessions of a WAF Developer: Protocol-Level Evasion of Web App Firewalls

Ivan Ristic

Black Hat · 2025black-hatadvanced

USA 2013 - Truncating TLS Connections to Violate Beliefs in Web Applications

Black Hat · 2025black-hatadvanced

Web Application Firewalls: Analysis of Detection Logic

Black Hat · 2025black-hatadvanced

Web Cache Deception Attack

Black Hat · 2025black-hatadvanced

Web Cache Entanglement: Novel Pathways to Poisoning

Black Hat · 2025black-hatadvanced

Web Timing Attacks Made Practical

Black Hat · 2025black-hatadvanced

Windows 2002 - One-Way SQL Hacking: Futility of Firewalls in Web Hacking

JD Glaser

Black Hat · 2025BHUSA25advanced

Back to the Future: Hacking and Securing Connection-based OAuth Architectures

Kaixuan Luo · Xianbo Wang · Adonis Fung · Yanxiang Bi · Wing Cheong Lau

Black Hat · 2025BHUSA25advanced

Cross-Origin Web Attacks via HTTP/2 Server Push and Signed HTTP Exchange

Pinji Chen · Jianjun Chen · Qi Wang · Mingming Zhang · Haixin Duan

Black Hat · 2025BHUSA25advanced

Detecting Taint-Style Vulnerabilities in Microservice-Structured Web Apps

Fengyu Liu · YouKun Shi · Tian Chen · Bocheng Xiang · Junyao He · Qi Li · Guangliang Yang · Yuan Zhang · Min Yang

Black Hat · 2025BHUSA25advanced

Lost in Translation: Exploiting Unicode Normalization

Ryan Barnett · Isabella Barnett

BSides · 2025bsides-lisbonadvanced

[BSL2022] Till REcollapse: fuzzing the web for mysterious bugs

André Baptista

BSides · 2025bsides-lisbonadvanced

2017 - Wild Wild Web App to Domain Admin: A Case Study by Nacho Sorribas

Nacho Sorribas

CODE BLUE · 2025code-blueadvanced

[CB16] Esoteric Web Application Vulnerabilities by Andres Riancho

Andres Riancho