Black Hat·27 min
Analysts investigate attack surfaces and defenses concerning Bypassing Browser Security Policies for Fun and Profit.
browser-securitybypassingbrowser+3
browser-security
17 talks tagged with this topic.
Filters+
Loading filters…
1–17 of 17 talks · loading…
Black Hat·44 min
Presenters detail vulnerability discovery and exploitation in Cutting Edge: Microsoft Browser Security - From People Who Owned It.
browser-securitycuttingedge+3
CyberRisk TV·17 min
Thyaga Vasudevan
Thyaga Vasudevan investigates AI’s Security Inflection Point: Hybrid, Browser Security, and Data Compliance.
complianceaibrowser-security
IEEE Symposium on Security and Privacy·14 min
Presenters detail vulnerability discovery and exploitation in WebSpec: Towards Machine-Checked Analysis of Browser Security Mechanisms.
browser-securitywebspecmachine-checked+2
Main Stage·26 min
Eugene Lim
Eugene Lim demonstrates client-side exploit chains against Google's Privacy Sandbox APIs to defeat differential privacy noise and track web users.
privacy-sandboxbrowser-securitydeanonymization+2
Main Stage·35 min
Eugene Lim
Eugene Lim demonstrates novel client-side attacks that subvert Google's Privacy Sandbox APIs to deanonymize users and track web browsing histories.
privacy-sandboxbrowser-securitydeanonymization+2
OWASP Foundation·42 min
Robert Hansen
Robert Hansen details The Perilous Future of Browser Security.
browser-securityperiloubrowser+1
OWASP Global AppSec USA 2025·43 min
Explores how Latest Browser Security Features Eliminate Bug Classes and evaluates key implications for security practitioners.
browser-securitylatestbrowser+2
App Sec Village·27 min
Avi Lumelsky · Gal Elbaz
Unveils the 0.0.0.0-day vulnerability in major browsers that lets public websites pivot to internal localhost APIs and achieve RCE.
0-0-0-0-daybrowser-securityremote-code-execution+2
Main Stage·18 min
Dongsung Kim
Demonstrates browser-based internal network port scanning using precise JavaScript timing side-channels to map intranet devices without elevated privileges.
browser-securityport-scanningtiming-attacks+2
DCGVR Village·32 min
Exploring the offensive and productivity utility of browser bookmarklets, demonstrating client-side automation, DOM manipulation, and security auditing tools.
bookmarkletsbrowser-securityjavascript+2
Main Stage·42 min
James Kettle
PortSwigger head of research James Kettle unveils browser-powered desync attacks, turning victim web browsers into desynchronization weapons against major websites.
http-request-smugglingbrowser-securitydesync+2
Main Stage·40 min
Dongsung Kim
Dongsung Kim demonstrates how modern browser features and emerging Web APIs can be chained to resurrect Cross-Site Request Forgery (CSRF) despite SameSite cookies.
csrfsamesitebrowser-security+2
App Sec Village·37 min
Parsia Hakimian
Explores browser sandbox architecture and demonstrates localghost techniques for escaping client-side sandboxes.
browser-securitysandbox-escapeweb-security+1
Blockchain Village·37 min
Philip Martin
Incident response and vulnerability handling for zero-day exploits in Firefox.
browser-securityzero-dayfirefox+2
Main Stage·42 min
Gerald Doussot
Revives DNS rebinding as a practical attack against internal services and introduces the Singularity toolkit for automated exploitation.
dns-rebindingsame-origin-policybrowser-security+2
Main Stage·33 min
David Wyde
David Wyde details slides: Client-Side HTTP Cookie Security: Attack and Defense David Wyde SOFTWARE ENGINEER, CISCO HTTP cookies are an important part of trust on the web.
http-cookiessession-managementweb-application-security+1