Web security is fun (or how I stole your Google Drive files)
Where
Talks
Disobey 2025
Duration
24 min
Walks through a web security flaw that let an attacker take files from a Google Drive account.
Summary
No summary yet — watch the video above, or open it on YouTube.
Related talks
Talks·46 min
Abraham Aranguren
Shows how to audit Electron desktop apps and chain XSS into code execution through node integration, preload scripts and IPC.
appsecwebapplication+2
Proving Ground·26 min
Hiroki Matsukuma
Shows how a class-instantiation weakness can bypass PHP __wakeup() guards inside deserialization gadget chains.
appsecwebvulnerabilities+2
Breaking Ground·42 min
Brian Reilly
Maps ColdFusion attack surface through recent vulnerabilities and offers ways to reduce exposure in legacy deployments.
appsecvulnerabilitiesweb+2