Alvaro Muñoz

OWASP Foundation·41 min

• OWASP
• AppSec
• Date: 2025
• Location: Owasp

Alvaro Muñoz · Oleksandr Mirosh

AppSecUSA 2017 analyzes Friday the 13th: Attacking JSON - Alvaro Muñoz & Oleksandr Mirosh.

Videos·39 min

• COMMUNITY
• AppSec
• Date: 2025
• Location: Community

Alvaro Muñoz

Alvaro Muñoz analyzes Attacking .NET deserialization.

Main Stage·45 min

• DEF CON
• AppSec
• Date: Aug 2020
• Location: Online

Oleksandr Mirosh · Alvaro Muñoz

Alvaro Muñoz and Oleksandr Mirosh uncover server-side template injection (SSTI) RCE vulnerabilities across leading enterprise Content Management Systems.

Main Stage·32 min

• DEF CON
• AppSec
• Date: Aug 2020
• Location: Online

Alvaro Muñoz · Oleksandr Mirosh

Alvaro Muñoz and Oleksandr Mirosh answer questions on Server-Side Template Injection, CMS template engine sandboxes, and secure coding.

Main Stage·37 min

• DEF CON
• AppSec
• Date: Aug 2019
• Location: Las Vegas

Alvaro Muñoz

Catalogs critical vulnerability classes in SAML, OAuth, and JWT SSO implementations used across enterprise environments.