Search talks

Black Hat · 2025black-hatadvanced

API-Induced SSRF: How Apple Pay Scattered Vulnerabilities Across the Web

Black Hat · 2025BHUSA25advanced

AI Agents for Offsec with Zero False Positives

Brendan Dolan-Gavitt

Black Hat · 2025BHUSA25advanced

Back to the Future: Hacking and Securing Connection-based OAuth Architectures

Kaixuan Luo · Xianbo Wang · Adonis Fung · Yanxiang Bi · Wing Cheong Lau

Black Hat · 2025BHUSA25advanced

Cross-Origin Web Attacks via HTTP/2 Server Push and Signed HTTP Exchange

Pinji Chen · Jianjun Chen · Qi Wang · Mingming Zhang · Haixin Duan

Black Hat · 2025BHUSA25advanced

Detecting Taint-Style Vulnerabilities in Microservice-Structured Web Apps

Fengyu Liu · YouKun Shi · Tian Chen · Bocheng Xiang · Junyao He · Qi Li · Guangliang Yang · Yuan Zhang · Min Yang

Black Hat · 2025BHUSA25advanced

Lost in Translation: Exploiting Unicode Normalization

Ryan Barnett · Isabella Barnett

CODE BLUE · 2025code-blueadvanced

[CB16] Esoteric Web Application Vulnerabilities by Andres Riancho

Andres Riancho

IEEE SP · 2025ieee-symposium-on-security-and-privacy

Postcards from the Post HTTP World: Amplification of HTTPS Vulnerabilities in the Web Ecosystem

OWASP · 2025owasp-foundation

NOSQL web application vulnerabilities and mitigation

AMIR LUCKACH

PROIDEA · 2025proidea-events

CONFidence London: Insecure HTTP Headers - web application vulnerabilities (Marcin Szydłowski)

Marcin Szydłowski

PROIDEA · 2025proidea-events

Michał Sajdak - An Overview of Interesting Web Application Vulnerabilities

Live Demos [JDD25]

PROIDEA · 2025proidea-events

OMH 2025: Michał Sajdak - Review of interesting vulnerabilities from the last year in web applica...

IEEE SP · 2024ieee-symposium-on-security-and-privacy

584 Break the Wall from bottom Automated Discovery of Protocol Level Evasion Vulnerabilities in Web

IEEE SP · 2024ieee-symposium-on-security-and-privacy

591 Where URLs Become Weapons Automated Discovery of SSRF Vulnerabilities in Web Applications Sam

BRUCON · 2022brucon-security-conferenceadvanced

BruCON 0x08 - Esoteric Web Application Vulnerabilities

Andres Riancho