Andres Riancho
where else to find them
no profile links on file
what they talk about
where they keep going back
- Black Hat USA2 editions2014–2019
on a stage with
never shared a talk
who talks about the same things
- Hillai Ben-Sasson3 talks
- Christophe Tafani-Dereeper5 talks
- Ashish Rajan6 talks
- Maya Levine5 talks
- Nir Ohfeld2 talks
- Krzysztof Kąkol4 talks
| title | conference | date |
|---|---|---|
| Internet-Scale Analysis of AWS Cognito Security | Black Hat USA 2019 | 2019-08-03 |
Internet-scale scan extracts ~3,100 Cognito IDs (2,500 usable), uses APKMirror/APKPure, Common Crawl and GitHub to pull IDs, then CC Lambda (1,000 concurrent… | ||
| Esoteric Web Application Vulnerabilities | CODE BLUE 2016 | 2016-10-20 |
Demonstrates concrete exploits: noSQL injection via aggressive input decoding in Rails/MongoDB that lets attackers bypass token checks and complete… | ||
| Pivoting in Amazon Clouds | Black Hat USA 2014 | 2014-08-02 |
A remote file include on a front-end EC2 lets an attacker proxy requests to 169.254 metadata and pull user-data and instance profile credentials; released… | ||
| nothing matches | ||