AI
📙 MCPwned: Hacking MCP Servers with One Skeleton Key Vulnerability 🤖
application securityoffensive security
Topic
Offensive Security
Breaking into systems on purpose — pentesters, red teamers, and exploit researchers sharing what actually works in the field.
- penetration testing
- red teaming
- exploit development
- vulnerability research
- bug bounty
- social engineering
- physical security testing
- adversary simulation
- attack tooling
- payload development
- privilege escalation
- lateral movement
- evasion techniques
- offensive automation
253
Talks
9
Conferences
BSidesSF 2026
16 talks📗 How We Red-Teamed Our Own AI Agent: Lessons from Operation Pale Fire 🤖
ai securityoffensive security
📙 The Great Credential Caper: How to Perform and then Defend Against the (Nearly Impossible) to Defend 🏗️
offensive securityapplication securityai security
📙 From Assistant to Assassin: Weaponizing An OpenClaw Vulnerability to Achieve 1-Click RCE 🖥️
offensive securityai security
📗 The Phantoms of the Fraudpera: An Overview of Anti-Detection Tooling 🖥️
offensive securityapplication security
📕 A Worm in the Apple: Wormable Zero-Click RCE in AirPlay Impacts Billions of Apple and IoT Devices 🖥️
offensive securitymobile and iot security
📕 Pwning and Defending AI Agent Code Interpreters 🤖
offensive securitycloud securityai security
📗 Follow the data to learn the secret 🤖
offensive securityapplication security
📙 Red Teaming from outside: Identifying and exploiting SaaS systems for access 🏗️
offensive securitycloud security
📙 From pocket to Pwn: How we hacked a multinational Corp for $200 with what's in our pockets 🏗️
offensive securitymobile and iot security
📙 We Pwn the Night: Growing & Leading an 31337 security research team 💼
security leadershipoffensive security
📙 Securing Space: The Next Frontier for Security Engineers 🏗️
network and infrastructureoffensive security
📙 Saving Bug Bounties from AI Slop 🤖
offensive securityai security
📙 Breaking Endpoint Anti-Ransomware: Going Browser Native 🏗️
offensive securityapplication securityidentity and access
📗 Lessons Learned from Building Custom Hacker Hardware 🏗️
offensive securitynetwork and infrastructure
📕 CloudShell Hide-n-Seek: enjoying the sweet persistent sounds of silence! 🔥
cloud securityoffensive securitydefensive security
Kubernetes Third Party Audit Review - Iain Smart, AmberWolf; Amir Montazery, Open Source Technology Improvement Fund; Rey Lejano, Red Hat; Tabitha Sable, Datadog; Pietro Tirenna, Shielder
cloud securityoffensive securityapplication security
How To Break Multi-Tenancy Again and Again ...and What We Can Learn From It - Lorin Lehawany & Sven Nobis, ERNW
offensive securitycloud security
📚 Tutorial: Attack Defense: Leverage eBPF To Reveal Attack Flows With Rich Context - Constanze Roedig, fusioncore.ai; Markus Gierlinger, Independent; Teodor Janez Podobnik, Prewave GmbH
defensive securitycloud securityoffensive security
What LLMs Do, and Don't, Know About Securing Kubernetes - Rory McCune, Datadog
cloud securityai securityoffensive security
Hack Me If You Can: Learning Kubernetes Security Through a Role-Play Battle - Aoi Takahashi, Recruit Co., Ltd. & Keita Mochizuki, NTT DATA Japan Corporation
cloud securityoffensive securityapplication security
[un]prompted 2026
15 talksBrendan Dolan-Gavitt & Vincent Olesen - Agents Exploiting "Auth-by-One" Errors | [un]prompted 2026
offensive securityidentity and access
AI Found 12 Zero-Days in OpenSSL | [un]prompted 2026
ai securityoffensive security
AI go Beep Boop!
offensive securitynetwork and infrastructure
Nicholas Carlini - Black-hat LLMs | [un]prompted 2026
offensive securityai security
FENRIR: AI Hunting for AI Zero-Days at Scale
ai securityoffensive security
Aaron Grattafiori & Skyler Bingham - Tenderizing the Target | [un]prompted 2026
ai securityoffensive security
Aaron Brown - Trajectory-Aware Post-Training Security Agents | [un]prompted 2026
ai securityoffensive security
When Passports Execute: Exploiting AI Driven KYC Pipelines
ai securityoffensive security
Operation Pale Fire: How We Red-Teamed Our Own AI Agent
ai securityoffensive security
Gadi Evron on behalf of Zenity - PleaseFix | [un]prompted 2026
ai securityoffensive security
Georgi G - Promp2Pwn - LLMs Winning at Pwn2Own | [un]prompted 2026
offensive securityai security
The Parseltongue Protocol: A Deep Dive into 100+ Textual Obfuscation Methods
ai securityoffensive security
Total Recon: How We Discovered 1000s of Open Agents in the Wild
ai securityoffensive security
Rob T. Lee, Glenn Thrope, Dan Hubbard & Sergej Epp - Vibe Coded | [un]prompted 2026
ai securityoffensive securitydefensive security
Olivia Gallucci - macOS Vulnerability Research | [un]prompted 2026
offensive securityai security
NDC Security 2026
5 talksFrom WAN to NAS: A Pwn2Own Journey Through the SOHO Attack Surface
offensive securitynetwork and infrastructure
Protocol-Hopping C2: Transport-Agnostic Command & Control That Won't Die
offensive securitydefensive security
What we can learn from the World's Biggest Heists
offensive securitysecurity leadership
Automated Security Testing with OWASP Nettacker
offensive securityapplication security
app.alert(1) is the new alert(1): PDFs as a vector to inject JavaScript code in web applications
application securityoffensive security
DefCamp 2025
20 talksDemocratizing IoT Security Research and Training Through Advanced Instrumentation
mobile and iot securityoffensive security
Hacking the Edge: Real-World ESI Exploits at DefCamp 2025
offensive securityapplication security
Offensive Security - Automation and AI at DefCamp 2025
offensive securityai security
Exploring Browser Permissions and Exploiting Permission Hijacking at DefCamp 2025
application securityoffensive security
Poisoning Pidgins in the Park at DefCamp 2025
offensive securityapplication security
Hacking Dictatorships with AI: Real-World Cases of Digital Sabotage and Propaganda Warfare
offensive securityai security
No keys, no scanners: Black-Box Hacking of AWS Environments at DefCamp 2025
cloud securityoffensive security
VIBE Pentesting - Enhancing the Human Hacker with LLMs at DefCamp 2025
offensive security
Initial Access & Workflow: Ransomware Insights at DefCamp 2025
offensive securityidentity and access
Smart Devices, Dumb Resets? Testing Firmware Persistence in Commercial IoT
mobile and iot securityoffensive security
From Prompt to Payload: Breaking GenAI with Real-World MCP Exploits at DefCamp 2025
ai securityoffensive security
Breaking the Cloud: Finding and Exploiting Misconfigurations in AWS at DefCamp 2025
cloud securityoffensive security
New Kerberos Attack Vector : Disabled SPN Kerberoasting at DefCamp 2025
offensive securityidentity and access
Trust No Format: Risks and Defenses for ML Model Serialization at DefCamp 2025
ai securityoffensive security
Lets make the LLM a Defector: Deceiving LLM into Attacking its Own Agent through natural language
ai securityoffensive security
Avoid Being Bounced from the Party - Persistence for fun & Profit at DefCamp 2025
offensive security
From Badge Forgery to Supply Chain: Advanced Penetration at DefCamp 2025
offensive security
TLS Protocol Manipulation: a (very) low throughput C2 channel at DefCamp 2025
offensive securitycryptography
Browser Side-Channel Vulnerabilities: Discovering Installed Apps via URL Protocol Handlers
offensive securityapplication security
C2 by Microsoft: What can go wrong if SCCM ends up in the wrong hands at DefCamp 2025
offensive securitydefensive security
OWASP Global AppSec USA 2025
7 talksOWASP Nettacker Project
offensive securitynetwork and infrastructure
Indirect Prompt Injection: Architectural Testing Approaches for Real World AI/ML Systems
ai securityapplication securityoffensive security
Attacking AI
offensive securityai security
Your RPA is Mine: Complete Takeover of RPA Ecosystems
application securityoffensive security
Lost in Translation: Exploiting Unicode Normalization
application securityoffensive security
Peeling Back the Plastic: Finding 0-Days in IoT Devices
mobile and iot securityoffensive securitynetwork and infrastructure
Plugins Gone Rogue: Attacking Developer Environments
application securityoffensive security
DEF CON® 33 Hacking Conference
121 talksNot Just a Pipeline Leak: Reconstructing the Real Attack Behind tj-actions
application securityoffensive securitydefensive security
Escaping the Privacy Sandbox with Client-Side Deanonymization Attacks
offensive securityapplication security
Locked Down, Not Locked Out: How I Escaped Your Secure Operator Workstation
offensive securitynetwork and infrastructure
Zero Trust, Total Bust - Breaking into thousands of cloud-based VPNs with one bug
offensive securityidentity and accessnetwork and infrastructure
Breakin 'Em All – Overcoming Pokemon Go's Anti-Cheat Mechanism
offensive securitymobile and iot security
DisguiseDelimit: Exploiting Synology NAS with Delimiters and Novel Tricks
offensive securitynetwork and infrastructure
"We are currently clean on OPSEC": The Signalgate Saga
governance and riskoffensive security
Kill Chain Reloaded: Abusing Legacy Paths for Stealth Persistence
offensive securitymalware and threat intel
Access Control Done Right the First Time
offensive securitynetwork and infrastructure
The One Bitcoin Heist: Making a custom Hashcat module to solve a decade-old puzzle challenge
cryptographyoffensive security
Remote code execution via MIDI messages
offensive securitynetwork and infrastructure
What is Dead May Never Die: The Ghost of Internet Explorer in Windows: MapUrlToZone
offensive securityapplication security
Of Stochastic Parrots and Deterministic Predators: Decision-Making in Adversarial Automation
offensive securityai security
Smart Bus Smart Hacking: From Free WiFi to Total Control
mobile and iot securityoffensive securitynetwork and infrastructure
Turning Microsoft's Login Page into our Phishing Infrastructure
offensive securityidentity and access
Ghosts in the Machine Check - Conjuring Hardware Failures for Cross-ring Privilege Escalation
offensive securitynetwork and infrastructure
Silent Signals: Exploiting Security and Privacy Side-Channels in End-to-End Encrypted Messengers
cryptographyoffensive securitymobile and iot security
The Missing Link: Draytek's New RCEs Complete the Chain
offensive securitynetwork and infrastructure
Invitation Is All You Need! Invoking Gemini for Workspace Agents with a Simple Google Calendar Invite
ai securityoffensive security
BitUnlocker: Leveraging Windows Recovery to Extract BitLocker Secrets
offensive securitycryptography
Hacker vs. Triage: Inside the Bug Bounty Battleground
offensive securitysecurity leadership
How NOT to Perform Covert Entry Assessments by WeHackPeople.com
offensive security
Virtualization-Based (In)security - Weaponizing VBS Enclaves
offensive securitymalware and threat intel
One Key, Two Key, I Just Stole Your goTenna Key
network and infrastructureoffensive securitycryptography
Metal-as-a-Disservice: Exploiting Legacy Flaws in Cutting-Edge Clouds
offensive securitycloud securitynetwork and infrastructure
Playing Dirty Without Cheating - Getting Banned for Fun and No Profit
offensive securitymalware and threat intelnetwork and infrastructure
Making the DEF CON 33 Badge
offensive securitynetwork and infrastructure
Passkeys Pwned: Turning WebAuthn Against Itself
identity and accessoffensive securityapplication security
The 2025 Pwnie Awards
offensive security
Browser Extension Clickjacking: One Click and Your Credit Card Is Stolen
offensive securityapplication security
Dark Capabilities: When Tech Companies Become Threat Actors
governance and risksecurity leadershipoffensive security
Loading Models, Launching Shells: Abusing AI File Formats for Code Execution
ai securityoffensive security
SSH-nanigans: Busting Open the Mainframes Iron Fortress through Unix
offensive securitynetwork and infrastructure
The DOMino Effect: Automated Detection and Exploitation of DOM Clobbering Vulnerability at Scale
application securityoffensive security
Win-DoS Epidemic: A crash course in abusing RPC for Win-DoS & Win-DDoS
offensive securitynetwork and infrastructure
Cloned Vishing: A case study
offensive security
Carding is Dead, Long Live Carding: How MaaS is fueling NFC relay attacks
malware and threat inteloffensive security
Navigating the Invisible
offensive securitynetwork and infrastructuremalware and threat intel
All your keyboards are belong to us!
offensive security
How to secure unique ecosystem shipping 1 billion+ cores?
offensive securitydefensive securityapplication security
Red Teaming Space: Hacking the Final Frontier
offensive security
Unveiling IoT Vulnerabilities: From Backdoors to Bureaucracy
offensive securitymobile and iot security
Elevators 101
offensive security
What is Dead May Never Die: The Immortality of SDK Bugs
mobile and iot securityoffensive security
Siri-ously Leaky: Exploring Overlooked Attack Surfaces Across Apple's Ecosystem
offensive securitymobile and iot security
Cash, Drugs, and Guns: Why Your Safes Aren't Safe
offensive securitymobile and iot security
Never enough about cameras - The firmware encryption keys hidden under the rug
mobile and iot securityoffensive security
From Pwn to Plan: Turning Physical Exploits Into Upgrades
offensive security
Orion - fuzzing workflow automation
offensive securityai security
Mind the Data Voids: Hijacking Copilot Trust to Deliver C2 Instructions with Microsoft Authority
ai securityoffensive security
Planting C4: Cross-Compatible External C2 for All Your Implants
offensive security
Illuminating the Dark Corners of AI: Extracting Private Data from AI Models and Vector Embeddings
ai securityoffensive security
HTTP/1.1 Must Die! The Desync Endgame
offensive securityapplication security
Badgelife Panel: Lessons from Years of Do’s, Don’ts, and Last-Minute Saves
offensive securitymobile and iot security
Amber64: Mining Hacker History from Over Half a Million Commodore 64 Disks
offensive securitymalware and threat intel
Hacking a head unit with malicious PNG
offensive securitymobile and iot security
Hacking Hotspots: Pre-Auth Remote Code Execution, Arbitrary SMS & Adjacent Attacks on 5G and 4G/LTE Routers
offensive securitymobile and iot security
Intro to Common Industrial Protocol Exploitation
offensive securitynetwork and infrastructure
One Modem to Brick Them All: Exploiting Vulnerabilities in the EV Charging Communication
offensive securitymobile and iot securitynetwork and infrastructure
ReVault! Compromised by your Secure SoC
offensive securitynetwork and infrastructure
Original Sin of SSO: macOS PRT Cookie Theft & Entra ID Persistence via Device Forgery
identity and accessoffensive security
Burning, trashing, spacecraft crashing: a collection of vulnerabilities that will end your space mission
offensive securityapplication security
How Not to IoT: Lessons in Security Failures
mobile and iot securityoffensive security
40 Years Of Phrack: Hacking, Zines & Digital Dissent
offensive security
Jailbreaking the Hivemind: Finding and Exploiting Kernel Vulnerabilities in the eBPF Subsystem
offensive security
Sometimes you find bugs, sometimes bugs find you
offensive securityapplication security
Paywall Optional: Stream for Free with a New Technique, Recursive Request Exploits (RRE)
offensive securityapplication security
They deployed Health AI on us. We’re bringing the rights & red teams.
ai securityoffensive securitygovernance and risk
Unmasking the Snitch Puck: the creepy IoT surveillance tech in the school bathroom
mobile and iot securityoffensive security
Hacking the Nautical Rules of the Road: Turn Left for Global Pwnage
offensive security
Boarding the VSAT: Real-World Exploits, Testbed Validation, and Policy Gaps in Maritime Connectivity
network and infrastructureoffensive security
How to Fake a Badge like a Pro: 11 Tips to Counterfeiting Event Credentials
offensive security
Shaking Out Shells with SSHamble
offensive security
Voices from the Frontlines: Managing Bug Bounties at Scale
Gabriel Nitu, Jay Dancer, Tyson Laa Deng, Ryan Nolette, Goraksh Shinde, Jill "thejillboss" Moné-Corallo
offensive securitysecurity leadership
Ghost Calls: Abusing Web Conferencing for Covert Command & Control
offensive securitynetwork and infrastructure
Hacking Hotel Locks; The Saflok Vulnerabilities Expanded
offensive security
Pirates of the North Sea
offensive securitynetwork and infrastructure
Turning your Active Directory into the attacker’s C2: modern Group Policy Objects enumeration and exploitation
identity and accessoffensive security
Rebadged, Relabeled, and Rooted: Pwnage via the Solar Supply Chain
offensive securitynetwork and infrastructure
Take all my money – penetrating ATMs
offensive securitynetwork and infrastructure
Flipping Locks - Remote Badge Cloning with the Flipper Zero and More
offensive securitynetwork and infrastructure
Cybersecurity in Latin America: The Untold Stories of Resilience & Innovation
security leadershipmalware and threat inteloffensive security
Journey to the center of the PSTN: How I became a phone company, and why you should too.
network and infrastructureoffensive security
Escaping the Privacy Sandbox with Client-Side Deanonymization Attacks
offensive securityapplication security
RATs & Socks abusing Google Services
offensive securitymalware and threat intel
Kill List: Hacking an Assassination Site on the Dark Web
offensive securitymalware and threat intel
No VPN Needed? Cryptographic Attacks Against the OPC UA Protocol
cryptographynetwork and infrastructureoffensive security
Securing Intelligence: How hackers are breaking modern AI systems … and how bug bounty programs can keep up
ai securityoffensive security
Dead Made Alive Again: Bypassing Intent Destination Checks and Reintroducing LaunchAnyWhere Privilege Escalation
offensive securitymobile and iot security
Inside Look at a Chinese Operational Relay Network
malware and threat intelnetwork and infrastructureoffensive security
SCCM: The tree that always bears bad fruits
offensive securityidentity and access
Rusty pearls: Postgres RCE on cloud databases
offensive securitycloud security
The (Un)Rightful Heir: My dMSA Is Your New Domain Admin
identity and accessoffensive security
Breaking Wi-Fi Easy Connect: A Security Analysis of DPP
network and infrastructureoffensive security
Infecting the Boot to Own the Kernel: Bootkits and Rootkits Development
offensive securitymalware and threat intel
Weaponizing Trust: Investigating a Threat Actor Targeting Security Researchers and Academics
malware and threat inteloffensive securityapplication security
Safe Harbor or Hostile Waters: Unveiling the Hidden Perils of the TorchScript Engine in PyTorch
application securityoffensive security
Silent Leaks: Harvesting Secrets from Shared Linux Environments
offensive securityapplication security
HaKCing OBD-II Emissions Testing
mobile and iot securityoffensive security
Breaking the Chain: Advanced Offensive Strategies in the Software Supply Chain
offensive securityapplication securitycloud security
Examining Access Control Vulnerabilities in GraphQL - A Feeld Case Study
application securityoffensive security
State of the Pops: Mapping the Digital Waters
offensive securitynetwork and infrastructure
Regex For Hackers
offensive securityapplication security
From Spoofing to Tunneling: New Red Team's Networking Techniques for Initial Access and Evasion
offensive securitynetwork and infrastructure
Smart Devices, Dumb Resets? Testing Firmware Persistence in Commercial IoT
mobile and iot securityoffensive security
Help! Linux in my Webcam! (•_•)
network and infrastructureoffensive security
Prompt. Scan. Exploit: AI’s Journey Through Zero-Days and a Thousand Bugs
offensive securityai security
OverLAPS: Overriding LAPS Logic
identity and accessoffensive security
Thinking Like a Hacker in the Age of AI
ai securityoffensive security
So Long, and Thanks for All the Phish
offensive securityapplication security
Referral Beware, Your Rewards Are Mine
offensive securityapplication security
Intro to Physical Security Bypass
offensive security
Carding, Sabotage & Survival: A Darknet Market Veteran’s Story
offensive securitymalware and threat intel
De-Virtualizing the Dragon: Automated Unpacking and Deobfuscation of Nested VM-Based Protectors using Symbolic Execution and Taint Tracking
malware and threat inteloffensive security
You snooze you lose: RPC-Racer winning RPC endpoints against services
offensive security
Here and Now: Exploiting the Human Layer at the Right Moment
offensive securityidentity and access
Turning Camera Surveillance on its Axis
offensive securitymobile and iot security
Your Passkey is Weak: Phishing the Unphishable
identity and accessoffensive security
7 Vulns in 7 Days: Breaking Bloatware Faster Than It’s Built
offensive securityapplication security
TSPU: Russia's Firewall and Defending Against the Future of Digital Repression
network and infrastructureoffensive security
What Game Hackers teach us about Offensive Security and Red Teaming
offensive securitymalware and threat intel
Black Hat USA 2025
47 talksAppleStorm - Unmasking the Privacy Risks of Apple Intelligence
governance and riskoffensive security
BitUnlocker: Leveraging Windows Recovery to Extract BitLocker Secrets
offensive security
Dark Corners: How a Failed Patch Left VMware ESXi VM Escapes Open for Two Years
offensive security
Black Hat USA 2025 | From Prompts to Pwns: Exploiting and Securing AI Agents
ai securityoffensive security
Black Hat USA 2025 | Ghost Calls: Abusing Web Conferencing for Covert Command & Control
offensive security
I'm in Your Logs Now, Deceiving Your Analysts and Blinding Your EDR
offensive security
ReVault! Compromised by Your Secure SoC
offensive securitynetwork and infrastructure
A Worm in the Apple - Wormable Zero-Click RCE in AirPlay Impacts Billions of Apple and IoT Devices
offensive securitymobile and iot security
Black Hat USA 2025 | Breaking Chains: Hacking Android Key Attestation
offensive securitycryptography
Breaking Out of The AI Cage: Pwning AI Providers with NVIDIA Vulnerabilities
cloud securityoffensive security
Ghosts in the Machine Check - Conjuring Hardware Failures to Breach CPU Privilege Boundaries
offensive securitynetwork and infrastructure
Unix Underworld: Tales from the Dark Side of z/OS
offensive securityidentity and access
Windows Hell No for Business
offensive securityidentity and access
Dead Pixel Detected - A Security Assessment of Apple's Graphics Subsystem
offensive securitymobile and iot security
Death by Noise: Abusing Alert Fatigue to Bypass the SOC (EDR Edition)
offensive securitydefensive security
From Spoofing to Tunneling: New Red Team's Networking Techniques for Initial Access and Evasion
offensive securitynetwork and infrastructure
Black Hat USA 2025 | Analyzing Smart Farming Automation Systems for Fun and Profit
mobile and iot securityoffensive security
Azure's Weakest Link? How API Connections Spill Secrets
cloud securityoffensive security
Burning, Trashing, Spacecraft Crashing: A Collection of Vulnerabilities That Will End Your Space Mission
offensive securitynetwork and infrastructure
Pwning User Phishing Training Through Scientific Lure Crafting
offensive securitygovernance and risk
How Tree-of-AST Redefines the Boundaries of Dataflow Analysis
offensive securityai security
Turning Camera Surveillance on its Axis
offensive security
Vaulted Severance: Your Secrets Are Now Outies
offensive securityidentity and access
Booting into Breaches: Hunting Windows SecureBoot's Remote Attack Surfaces
offensive security
HTTP/1.1 Must Die! The Desync Endgame
application securityoffensive security
Black Hat USA 2025 | The 5G Titanic
network and infrastructureoffensive security
Universal and Context-Independent Triggers for Precise Control of LLM Outputs
ai securityoffensive security
Advanced Active Directory to Entra ID Lateral Movement Techniques
identity and accessoffensive security
AI Enterprise Compromise - 0click Exploit Methods
ai securityoffensive security
Derandomizing the Location of Security-Critical Kernel Objects in the Linux Kernel
offensive security
Black Hat USA 2025 | Leveraging Jamf for Red Teaming in Enterprise Environments
offensive securitymobile and iot security
Not Sealed: Practical Attacks on Nostr, a Decentralized Censorship-Resistant Protocol
cryptographyoffensive security
Unveiling Hidden Preauth Vulnerabilities in Windows HTTP Services
offensive security
Evil Digital Twin, Too: The First 30 Months of Psychological Manipulation of Humans by AI
ai securityoffensive security
Lost in Translation: Exploiting Unicode Normalization
application securityoffensive security
Peril at the Plug: Investigating EV Charger Security and Safety Failures
offensive securitymobile and iot securitynetwork and infrastructure
AI Agents for Offsec with Zero False Positives
ai securityoffensive security
Clustered Points of Failure - Attacking Windows Server Failover Clusters
offensive securityidentity and access
Ransomware, Tracking, DoS, and Data Leaks on Xiaomi Electric Scooters
mobile and iot securityoffensive security
Uncovering 'NASty' 5G Baseband Vulnerabilities through Dependency-Aware Fuzzing
offensive securitymobile and iot security
Black Hat USA 2025 | Use and Abuse of Palo Alto's Remote Access Solution
offensive securitynetwork and infrastructure
Open RAN, Open Risk: Uncovering Threats and Exposing Vulnerabilities in Next-Gen Cellular RAN
network and infrastructureoffensive security
Racing for Privilege: Leaking Privileged Memory From Any Intel System Using a Microarchitectural Race Condition
offensive security
Watch Your (Lock)Step: Glitching into Automotive Processors
offensive securitymobile and iot security
Breaking Control Flow Integrity by Abusing Modern C++
offensive security
Weaponization of Cellular Based IoT Technology – Leveraging Smart Devices to Gain a Foothold
mobile and iot securityoffensive security
Black Hat USA 2025 | Weaponizing Apple AI for Offensive Operations
offensive securitymobile and iot security
OWASP Global AppSec USA 2024
17 talksOWASP JuiceShop
application securityoffensive security
GraphQL Exploitation: Secondary Context Attacks and Business Logic Vulnerabilities
offensive securityapplication security
The Container Escape Room: An Exploration of Container Escapes
cloud securityoffensive securitydefensive security
Sanitize Client-Side: Why Server-Side HTML Sanitization is Doomed to Fail
application securityoffensive security
Modernizing the Application Penetration Engagement and Reporting Lifecycle
offensive securityapplication security
Hackuracy: Boosting AST accuracy through hacking
application securityoffensive securitygovernance and risk
O My Data: OData Injection attack and other injections in Microsoft Power Platform and UiPath
application securityoffensive security
Living off Microsoft Copilot
offensive securityai security
Think Like a Hacker (Keynote and book signing)
offensive securitysecurity leadership
Hidden Chains: Revealing High-Impact Bugs from Bounty submissions
offensive securityapplication security
Under the Radar: How we found 0-days in the Build Pipeline of OSS Packages
application securityoffensive security
Red, Blue, and Purple AI (Keynote)
offensive securitydefensive securityai security
OWASP IoT Security Testing Guide (ISTG)
mobile and iot securityoffensive security
Kernel Alchemy: Crafting Mobile Kernel Code to Evade Modern RASP Protections
mobile and iot securityoffensive securityapplication security
Web Security Experts: Are you overlooking WebRTC vulnerabilities?
offensive securityapplication securitynetwork and infrastructure
OWASP Nettacker
offensive securitynetwork and infrastructure
AI Goat: A Damn Vulnerable AI Infrastructure
ai securitycloud securityoffensive security