James Kettle
where else to find them
what they talk about
where they keep going back
- Black Hat USA2 editions2019–2023
all 4 in the filters
on a stage with
never shared a talk
who talks about the same things
- Frans Rosén6 talks
- Gareth Heyes5 talks
- Niall Merrigan19 talks
- Erlend Oftedal12 talks
- Pedro Fortuna9 talks
- Benedek Gagyi8 talks
| title | conference | date |
|---|---|---|
| Smashing the State Machine: The True Potential of Web Race Conditions | Black Hat USA 2023 | 2023-08-05 |
Introduces the single packet attack implemented as a Turbo Intruder update that sends 20–30 requests in one packet so servers process them within a median ~1… | ||
| HTTP Desync Attacks: Request Smuggling Reborn | Black Hat Europe 2019 | 2019-12-02 |
Remote unauthenticated HTTP desync lets an attacker make a backend treat an injected prefix as a separate request by abusing mismatched parsing of… | ||
| HTTP Desync Attacks: Smashing Into The Cell Next Door | OWASP Global AppSec Amsterdam 2019 | 2019-09-23 |
Demonstrates concrete HTTP request smuggling techniques that desynchronize front-end and back-end parsers by mixing Content-Length and chunked framing and by… | ||
| HTTP Desync Attacks: Smashing into the Cell Next Door | Black Hat USA 2019 | 2019-08-03 |
Remote unauthenticated attackers can break HTTP request isolation to splice a malicious prefix into another user’s request, enabling header injection, cache… | ||
| Exploiting CORS Misconfigurations for Bitcoins and Bounties | AppSecUSA 2016 | 2016-10-11 |
Shows concrete exploits: CORS dynamic allow-origin logic and the null origin let attackers steal API keys and take over accounts, enabling full Bitcoin… | ||
| nothing matches | ||