Search talks

Black Hat · 2025black-hatadvanced

Bridging the Gap: Type Confusion and Boundary Vulnerabilities Between WebAssembly and JavaScript

Black Hat · 2025black-hatadvanced

Discovering React2Shell: JavaScript’s Long-Awaited Deserialization Flight-mare

Lachlan Davidson

CODE BLUE · 2025code-blueadvanced

Abusing Adobe Reader’s JavaScript APIs by Abdul Aziz Hariri and Brian Gorenc

OWASP · 2025owasp-foundation

AppSec EU 2017 On The (In-)Security Of JavaScript Object Signing And Encryption by Dennis Detering

OWASP · 2025owasp-foundation

AppSec EU15 - Frederik Braun - Using A JavaScript CDN That Can Not XSS You - With Subresource Int...

Subresource Int...

OWASP · 2025owasp-foundation

How Do JavaScript Frameworks Impact The Security Of Applications?

Ksenia Peguero

OWASP · 2025owasp-foundation

JavaScript Obfuscation It’s All About the P a c k e r s

Or Katz

OWASP · 2025owasp-foundation

Krzysztof Kotowicz - Biting into the Forbidden Fruit. Lessons from Trusting JavaScript Crypto.

Krzysztof Kotowicz

OWASP · 2025owasp-foundation

Maty Siman - Warning Ahead Security Stormsare Brewing in Your JavaScript

Maty Siman

OWASP · 2025owasp-foundation

OWASP Top 10 for JavaScript Developers

LEWIS ARDERN

OWASP · 2025owasp-foundation

ScriptProtect: Mitigating Unsafe Third-Party JavaScript Practices

Marius Musch · Martin Johns

OWASP · 2025owasp-foundation

Securing Node.js and JavaScript

VLADIMIR DE TURKHEIM

OWASP · 2025owasp-foundation

Warning Ahead: Security Storms are Brewing in Your JavaScript

PROIDEA · 2025proidea-events

4Developers 2016: ScalaJS - web without pain of JavaScript (Jarosław Ratajski)

PROIDEA · 2025proidea-events

4Developers Katowice 2019: Webassembly. The end of JavaScript?, Joanna Lamch

DEF CON · 2023DC31

Clocks Have Ears: Timing and Browser-Based Local Network Port Scanner

Dongsung Kim

DEF CON · 2023DC31

Prototype Pollution Leads to Remote Code Execution in Node.js

Mikhail Shcherbakov · Musard Balliu

OWASP · 2023owasp-global-appsec-dublin

Global AppSec Dublin: JavaScript Realms: The Blank Spot In Web App Runtime Security

Gal Weizman

BSides · 2022bsides-knoxvilleadvanced

Omar Minawi - Client-Side JavaScript from your nightmares: Multi-step XSS attacks and defenses

Omar Minawi

DEF CON · 2022DC30

Fun with Bookmarks: Weaponizing Bookmarklets & Browser Storage

OFFENSIVECON · 2022offensivecon

OffensiveCon19 - FuzzIL: Guided Fuzzing for JavaScript Engines

Samuel Groß

OFFENSIVECON · 2022offensivecon

OffensiveCon23 - Advancements in JavaScript Engine Fuzzing

Samuel Groß · Carl Smith

SECURITY FEST · 2022security-fest

Hacking JavaScript Desktop apps with XSS and RCE

Abraham Aranguren [Security Fest 2022]

DEF CON · 2021DC29

Extension Land: Exploits and Rootkits in Browser Extensions (Live)

Barak Sternberg