Alexei Kojenov
where else to find them
no profile links on file
what they talk about
where they keep going back
no series more than once — all 5 in the filters
on a stage with
never shared a talk
who talks about the same things
- Espen Sande-Larsen11 talks
- Felix Leder4 talks
- Kasimir Schulz6 talks
- Kenneth Yeung4 talks
- Gareth Heyes5 talks
- Niall Merrigan19 talks
| title | conference | date |
|---|---|---|
| Outside the box: pwning IoT devices through their applications | Global AppSec US 2021 Virtual | 2021-11-08 |
Findings: unauthenticated firmware backup and unauthenticated firmware upload lets an attacker push uk.rar with uk.txt and gain a reverse shell via uk.rar… | ||
| Yes, you too can break crypto Exploiting common crypto mistakes | OWASP Global AppSec Virtual 2020 | 2020-10-22 |
Shows concrete exploits and working demos: a ransomware (Linux Encoder) recovers keys from predictable RNG seeded by file time; RC4 reuse xors two ciphertexts… | ||
| Break Crypto like a Pro! | BSidesSF 2020 | 2020-02-23 |
Shows concrete exploits and working demos: Github code reproduces an attack that decrypts a ciphertext via a padding oracle demo in seconds, an RC4 image XOR… | ||
| [In]secure Deserialization, And How [Not] To Do It | OWASP Global AppSec Amsterdam 2019 | 2019-09-23 |
Live demos show Java deserialization can crash a Tomcat thread with a tiny serialized file and spin CPU to denial of service, Python pickle cookies can spawn a… | ||
| Deserialization: what, how and why [not] | OWASP AppSec USA 2018 | 2018-10-11 |
Code runs live showing Java native serialization bytes and base64 signatures, a hex edit of a base64 session cookie to flip role to administrator, crafted… | ||
| nothing matches | ||