Def Con Sg1 Csit Village Poh Cai Min Shawn Pang Kinig Bridging Webapi Fuzzing With A Graph

Summary

This presentation expands on prior research into CVE-2024-27304 through a proof-of-concept walkthrough of SQL injection at the ... You on a link. A download prompt appears. Your mouse suddenly seems to take on a life of its own and clicks the pop-up. We share our findings from using AI tools for web penetration testing on bug bounty programmes. A thought experiment on Rolling API Tokens, leveraging the Double Ratchet Protocol to eliminate long-lived secrets through ... We share the lessons learnt from testing government web apps - how we prioritised, and what interesting bugs appeared. We will ... Audiovisual hardware - from web conferencing cameras to meeting room systems - is deeply embedded in modern enterprises' ... Join us as we go behind-the-scenes of threat hunting and investigation. From daily workflows to real-world incident response, ... Understanding the adversary mindset is essential for cyber defenders to anticipate how attackers operate and strategically ... Critical vulnerabilities CVE-2025-52691 remind us that “low-hanging fruit” still exists today. This session deconstructs how ... This talk breaks down the discovery of CVE-2025-52692, a zero-day vulnerability in the widely used Linksys E9450 SG router. Compilers generate all our code, but they don't get it right all the time. In this talk, we'll introduce how compilers can affect software ... In stripped binaries, malware analysts often struggle in a sea of raw offsets and pointer arithmetic. We share our journey of data ... During this session, we will share simulated water testbed, and the attacks that can work on it.