OWASP Foundation·49 min
Yadi Abdalhalim · Jovon Itwaru
Yadi Abdalhalim investigates Token It Up A Notch: Elevating Payment Security.
payment-securitytokennotch+2
payment-security
6 talks tagged with this topic.
Filters+
Loading filters…
1–6 of 6 talks · loading…
Payment Village·35 min
Tom Chotia
Examines how extra features and protocol extensions in contactless payment systems introduce security vulnerabilities, proposing fixes for payment terminals.
nfcpayment-securitywireless+2
RF Village·31 min
Aidan Nakache · Equip
Details reverse engineering stored-value contactless laundry cards, uncovering data structure vulnerabilities that allow arbitrary balance modification.
smartcardreverse-engineeringnfc+2
Main Stage·34 min
Omer Attias
Omer Attias dissects API vulnerabilities in popular mobile transit payment apps like Moovit, demonstrating fare evasion and passenger PII data leakage.
api-securitymobilepayment-security+2
Main Stage·42 min
Federico Borgogno · Luciano Barrionuevo
Examines hardware and Bluetooth vulnerabilities in low-cost Mobile Point-of-Sale (MPOS) card readers that allow attackers to skim payment credentials.
mpospayment-securityskimming+2
Main Stage·41 min
Joshua Maddux
Discovers widespread SSRF vulnerabilities introduced by Apple Pay merchant validation requirements in e-commerce applications.
ssrfapplepayapi-security+2