DEF CON · 2025DC33
How API Flaws Led to Admin Access to 1k+ USA Dealers & Control of Yr Car
Eaton Zveare
Search
Search talks
Shareable results across the archive. Difficulty is beginner, intermediate, advanced, or expert.
Filters+
Year
Conference
Track
Difficulty
Topic
vulnerability-research317owasp303vulnerabilities142application113lesson98authentication93summit92vulnerability92
Showing the most common topics.
DEF CON · 2025DC33
Referral Beware, Your Rewards Are Mine
Whit Taylor
DEF CON · 2025DC33
AutoDetection & Exploitation of DOM Clobbering Vuln at Scale
Zhengyu Liu · Jianjia Yu
DEF CON · 2025DC33
How a Vuln in Dealer Software Could've Unlocked Your Car
Eaton Zveare · R Piyush
DEF CON · 2025DC33
HTTP/1.1 Must Die! The Desync Endgame
James 'albinowax' Kettle
OWASP · 2025owasp-foundation
APPSEC CA 2017 A Hybrid Approach for Web App Penetration Testing
David Caissy
OWASP · 2025owasp-foundationadvanced
AppSec EU 2017 Combining The Security Risks Of Native And Web Development Hybrid Apps
Michael
OWASP · 2025owasp-foundation
AppSec EU 2017 LT Bot Or Not? Migrating Automated Threats To Web Applications by Bastian Braun
OWASP · 2025owasp-foundation
AppSec EU 2017 LT Increasing Web Seurity With The Power Of HTTP Headers by Jose Manuel Ortega
OWASP · 2025owasp-foundation
AppSec EU15 - Alex Infuhr - PDF - Mess With The Web
Alex Infuhr
OWASP · 2025owasp-foundation
AppSec EU15 - Eduardo Vela Nava - Web Service Workers - Breaking The Web Because It Would Be A Sh...
Eduardo Vela Nava
OWASP · 2025owasp-foundation
AppSec EU15 - Matt Johansen, Johnathan Kuskos - The Top 10 Web Hacks of 2014
Matt Johansen · Johnathan Kuskos
OWASP · 2025owasp-foundation
AppSec EU15 - Thibault Koechlin - Naxsi, A Web Application Firewall for NGINX
Thibault Koechlin
OWASP · 2025owasp-foundation
AppSec EU15 - Yossi Daya - Rise Of The Machines - How Automated Processes Overtook the Web
Yossi Daya
OWASP · 2025owasp-foundation
Evan Johnson - Misconfigured CORS and why web appsec is not getting easier
Evan Johnson
DEF CON · 2024DC32
Relative Path File Injection: The Next Evolution in RPO
Ian Hickey
DEF CON · 2024DC32
Securing Frontends at Scale: Paving Our Way to Post-XSS World
Jen Ozmen · Aaron Shim
DEF CON · 2024DC32
Speed Bumps and Speed Hacks: Adventures in Car Mfg Security
Paulo Silva · David Sopas
DEF CON · 2024DC32
Web2 Meets Web3: Hacking Decentralized Applications
Peiyu Wang
DEF CON · 2024DC32
An Adversarial Approach to Airline Revenue Management Proving Ground
Craig Lester
DEF CON · 2024DC32
From Easy Wins to Epic Challenges: Bounty Hunter Edition
Daniel 'Blaklis' Le Gall
DEF CON · 2024DC32
Practical Exploitation of DoS in Bug Bounty
Roni Lupin Carta
DEF CON · 2024DC32
Top War Stories from a TryHard Bug Bounty Hunter
Justin 'Rhynorater' Gardner