Black Hat·35 min
James Kettle
Analysts investigate attack surfaces and defenses concerning HTTP/2: The Sequel is Always Worse.
httpsequelalway+1
James Kettle
18 talks in the archive.
Filters+
Loading filters…
1–18 of 18 talks · loading…
Black Hat·38 min
James Kettle
Analysts investigate attack surfaces and defenses concerning HTTP/2: The Sequel is Always Worse.
httpsequelalway+1
Black Hat·41 min
Daniel Cuthbert · Thomas Brandstetter · Meadow Ellis · James Kettle · Marina Krotofil
Industry experts analyze emerging threats surrounding Locknote: Conclusions and Key Takeaways from Black Hat Europe 2021.
locknoteconclusiontakeaway+1
Briefings·38 min
James Kettle
Some people think the days of critical HTTP request smuggling attacks on hardened targets have passed.
open-sourcegovernmentmethodology+2
Ekoparty Security Conference·47 min
James Kettle
Presents james Kettle | Practical Web Cache Poisoning: Redefining Unexploitable | Ekoparty 2018 and evaluates key implications for security practitioners.
james-kettlekettle-practicalpractical-cache+2
NorthSec·37 min
James Kettle
Industry experts analyze emerging threats surrounding James Kettle - Backslash Powered Scanning: Implementing Human Intuition.
scanningjamekettle+3
OWASP Foundation·45 min
James Kettle
James Kettle explores HTTP Desync Attacks: Smashing Into The Cell Next Door.
desynchttpattack+2
OWASP Foundation·39 min
James Kettle
Engineers explore architecture and security mechanisms for James Kettle - Active Scan Augmenting manual testing with attack proxy plugins.
jamekettleactive+3
OWASP Foundation·46 min
James Kettle
AppSecUSA 2016 details James Kettle - Exploiting CORS Misconfigurations for Bitcoins and Bounties.
jamekettleexploiting+3
Black Hat USA·39 min
James Kettle
Industry experts analyze emerging threats surrounding Listen to the Whispers: Web Timing Attacks that Actually Work.
webtiming-attackslisten+3
Main Stage·43 min
James Kettle
Techniques and battle-tested open-source tooling to reliably execute sub-millisecond web timing attacks in production environments.
timing-attackswebside-channel+2
Black Hat USA·38 min
James Kettle
Analysts investigate attack surfaces and defenses concerning Smashing the State Machine: The True Potential of Web Race Conditions.
smashingstatemachine+2
Main Stage·42 min
James Kettle
James Kettle introduces multi-request single-packet race condition techniques, collapsing complex web application state machines within sub-millisecond windows.
race-conditionsweb-securityhttp-desync+2
Black Hat USA 2022·37 min
James Kettle
Investigates browser-Powered Desync Attacks: A New Frontier in HTTP Request Smuggling and evaluates key implications for security practitioners.
browser-powered-desyncdesync-attacksattacks-frontier+2
Main Stage·42 min
James Kettle
PortSwigger head of research James Kettle unveils browser-powered desync attacks, turning victim web browsers into desynchronization weapons against major websites.
http-request-smugglingbrowser-securitydesync+2
NahamSec·21 min
James Kettle)
HTTP Request Smuggling Explained (with James Kettle).
request-smugglinghttp-request-smugglinghttp+3
Main Stage·40 min
James Kettle
PortSwigger researcher James Kettle pioneers HTTP/2 request smuggling, uncovering critical implementation flaws when front-end reverse proxies downgrade to back-end HTTP/1.1.
http2request-smugglingdesync+2
Main Stage·42 min
James Kettle
Presents HTTP request smuggling as a modern attack primitive for cache poisoning, session hijacking, and WAF bypass.
http-smugglingrequest-desyncweb-security+2