Jonathan Leitschuh
where else to find them
github:JLLeitschuh
bluesky:jlleitschuh.bsky.social
mastodon:@JLLeitschuh@infosec.exchange
linkedin:jonathan-leitschuh
what they talk about
where they keep going back
no series more than once — all 4 in the filters
on a stage with
never shared a talk
who talks about the same things
- Munawar Hafiz12 talks
- Christoph Hartmann7 talks
- Joseph Katsioloudes19 talks
- Paula Paul2 talks
- Brian Fox10 talks
- Chris Eng4 talks
| title | conference | date |
|---|---|---|
| MCPwned: Hacking MCP Servers with One Skeleton Key... (Jonathan Leitschuh) | BSidesSF 2026 | 2026-03-21 |
Weaponizes DNS rebinding against SSE/streaming HTTP MCP servers to pivot a browser into local/dev infrastructure, exfiltrates environment variables and… | ||
| Scaling the Security Researcher to Eliminate OSS Security Vulnerabilities Once and For All | Open Source Summit Europe 2023 | 2023-09-19 |
Claims an automated pipeline that finds vulnerabilities with CodeQL and applies OpenRewrite transformations to produce 1,596 pull requests (40% merge rate) to… | ||
| Scaling the Security Researcher to Eliminate OSS Security Vulnerabilities Once... | SupplyChainSecurityCon @ Open Source Summit Europe 2023 | 2023-09-19 |
Finds and fixes concrete patterns at scale using CodeQL to locate vulnerable Java projects and OpenRewrite to make style-preserving AST edits. The workflow… | ||
| Scaling the Security Researcher to Eliminate OSS Vulnerabilities Once and for... | Critical Software Summit @ Open Source Summit North America 2023 | 2023-05-10 |
Claims that automated bulk pull request generation can actually fix widespread OSS flaws using real tooling and measurable results. Uses CodeQL variant… | ||
| nothing matches | ||