Proving Ground·24 min
Gadi Z Naveh · Alon Rosenblum
Shows how OAuth consent and device code flows let attackers keep SaaS access after an admin disables the app.
identitycloudattack+2
DEF CON 34 talks are here: 354 talks, summarized and searchable.
Browse DEF CON 341 talk in the archive.
1–1 of 1 talk
Proving Ground·24 min
Gadi Z Naveh · Alon Rosenblum
Shows how OAuth consent and device code flows let attackers keep SaaS access after an admin disables the app.