Gareth Heyes
where else to find them
website:https://garethheyes.co.uk
github:hackvertor
bluesky:garethheyes.co.uk
mastodon:@gaz@infosec.exchange
linkedin:gareth-heyes-25a62b2
what they talk about
where they keep going back
no series more than once — all 4 in the filters
on a stage with
never shared a talk
who talks about the same things
- Benedek Gagyi8 talks
- Anand Vemuri2 talks
- Alex Sexton12 talks
- James Kettle13 talks
- Martin Johns14 talks
- Frans Rosén6 talks
| title | conference | date |
|---|---|---|
| Splitting the Email Atom: Exploiting Parsers to Bypass Access Controls | NDC Manchester 2025 | 2025-12-01 |
Shows how RFC-compliant addresses are weaponized to bypass domain checks: encoded-word and Unicode overflows let the Ruby mail library (v2.8.x, 58M+ downloads)… | ||
| Server Side Prototype Pollution | Global AppSec Dublin 2023 | 2023-02-15 |
Claims a safe black‑box way to detect server‑side prototype pollution without causing denial‑of‑service by flipping subtle behaviors rather than crashing the… | ||
| Exploiting Unknown Browsers and Objects | OWASP AppSec Europe 2018 | 2018-07-02 |
A tool called Hackability inspector enumerates hidden JavaScript objects in embedded browsers and runs concrete tests it finds cross-domain window detection… | ||
| XSS Horror Show | OWASP AppSec Research (AppSecEU) 2015 | 2015-05-19 |
Dives into concrete browser bugs and working exploits: demonstrates Relative Path Overwrite (RPO) where a single slash or pretty-URL rewrite causes a… | ||
| nothing matches | ||