Alvaro Munoz
where else to find them
no profile links on file
what they talk about
where they keep going back
- Black Hat USA2 editions2016–2019
on a stage with
who talks about the same things
- Oleksandr Mirosh3 talks
- Brian Vermeer66 talks
- Alexei Kojenov6 talks
- Ian Haken5 talks
- Steve Poole41 talks
- Paul Molin10 talks
| title | conference | date |
|---|---|---|
| SSO Wars: The Token Menace | Black Hat USA 2019 | 2019-08-03 |
Two .NET flaws let forged SSO tokens bypass verification and run code: an algorithm-to-type mapping allows arbitrary constructor invocation via unvalidated… | ||
| Friday the 13th: Attacking JSON | AppSec USA 2017 | 2017-09-19 |
Shows concrete RCE chains against Java and .NET JSON parsers by abusing type discriminators and setter calls, with working ObjectDataProvider gadget that… | ||
| A Journey From JNDI/LDAP Manipulation to Remote Code Execution Dream Land | Black Hat USA 2016 | 2016-08-03 |
A new class of JNDI vulnerability claims remote code execution via CVE-2015-4902 by abusing dynamic protocol switching so lookups can be pointed at attacker… | ||
| nothing matches | ||