BSidesSF 2022 - Hook, Line and Sinker
Details BSidesSF 2022 - Hook, Line and Sinker and evaluates key implications for security practitioners.
Summary
BSidesSF 2022 talk by Abhay Bhargav on attacking API webhooks via Webhook Boomerang flaws that turn callbacks into SSRF vectors against the originating service. Demonstrates reaching cloud metadata endpoints and compromising credentials despite metadata-header protections using standard HTTP and DNS behavior.
Related talks
BSides San Francisco·51 min
Len Noe
Examines BSidesSF 2022 - Biohacker: The Invisible Threat (Len Noe) and evaluates key implications for security practitioners.
BSides San Francisco·11 min
Closing Ceremony (Reed Loden)
Demonstrates BSidesSF 2022 and evaluates key implications for security practitioners.
BSides San Francisco·41 min
Jackie Bow
Examines BSidesSF 2022 - Keynote: teams Need More Mediocre Security Engineers (Jackie Bow) and evaluates key implications for security practitioners.