Def Con Sg1 Csit Village Sng Peng Boon Web Hacking Lessons From Pre Gov Bug Bounty Program

Summary

We share our findings from using AI tools for An insecure JavaScript bridge (JSB) in Android WebView allows attackers to abuse exposed interfaces to read local files and ... As AI accelerates development and increases system complexity, robust defence-in-depth and deep technical expertise are ... Critical vulnerabilities CVE-2025-52691 remind us that “low-hanging fruit” still exists today. This session deconstructs how ... This talk breaks down the discovery of CVE-2025-52692, a zero-day vulnerability in the widely used Linksys E9450 SG router. Grammar-based fuzzing made painless! This talk highlights how the generation of grammar files for browser WebAPIs can be ... Using the rubber ducky to deploy a large payload in an air-gapped environment is no easy feat. This talk introduces a way of ... This presentation expands on prior research into CVE-2024-27304 through a proof-of-concept walkthrough of SQL injection at the ... Modern printers remain one of the most overlooked yet highly privileged devices inside enterprise networks. Despite their deep ... Speaker: The Portswigger Team Presented at: