Patrycja Wegrzynowicz
where else to find them
no profile links on file
what they talk about
all 11 in the filters
where they keep going back
all 16 in the filters
on a stage with
never shared a talk
who talks about the same things
- Ian Coldwater19 talks
- Lewis Denham Parry18 talks
- Andrew Martin50 talks
- Rory McCune18 talks
- Brad Geesaman8 talks
- Duffie Cooley18 talks
| title | conference | date |
|---|---|---|
| Prometheus Puzzlers: Traps, Pitfalls, and Corner Cases | Voxxed Days Crete 2025 | 2025-09-26 |
Hands‑on Prometheus puzzles showing concrete surprises: with 98 constant samples and six buckets a 99th percentile query estimates ~994ms because… | ||
| The Hacker's Guide to Kubernetes | Voxxed Days Crete 2025 | 2025-09-26 |
Four live demos exploit OWASP Kubernetes Top 10 issues: a scan finds open kubelet API on two worker nodes allowing remote command execution and reverse shells… | ||
| Understanding and Mitigating Privilege Escalation Threats in Kubernetes | JDD 2024 | 2024-10-22 |
Demonstrations show full cluster compromise from simple misconfigurations: using kubectl impersonation and a mis-scoped RBAC to list secrets, extracting a JWT… | ||
| The Hacker's Guide to Kubernetes | JNation 2024 | 2024-06-04 |
Live demos chain small misconfigurations into full account takeover: attackers scan with nmap and curl, find an open kubelet API, use kubelet exec to get a… | ||
| Patrycja Wegrzynowicz at JNation 2024 | JNation 2024 | 2024-06-04 |
Hacking-focused session shows step-by-step live demos that connect to a worker node’s kubelet API open, enumerate ports, read pod state and instantiate a… | ||
| Beyond the Pod: Privilege Escalation in Kubernetes | Devoxx France 2024 | 2024-04-17 |
Four live demos show concrete escalation paths: using a misconfigured impersonate permission to mint JWTs and hijack multiple accounts, reading the demo secret… | ||
| The Hacker’s Guide to Kubernetes Reloaded | JCON WORLD ONLINE 2023 | 2023-11-20 |
Live demos show account takeover by abusing leaked kubeconfig and misconfigured pods: apply a manifest with hostPath hostPID hostNetwork and privileged mode… | ||
| The Hacker's Guide to JWT Security | GopherCon AU 2023 | 2023-11-08 |
Four live demos show concrete failures and fixes: a none algorithm bypass lets an attacker replace a token and become another user because parse-without-verify… | ||
| The Hacker's Guide to JWT Security | GopherCon UK 2023 | 2023-08-16 |
Walkthrough of four live demos shows concrete failures and fixes: a none algorithm bypass accepted because code uses parse not verify; an HMAC key recovered… | ||
| The Hacker’s Guide to Kubernetes | GeeCON 2023 | 2023-04-19 |
Live demos show an open kubelet API and default anonymous kubelet auth allowing node-level queries, use of kubeletctl and netcat to schedule pods and establish… | ||
| The Hacker’s Guide to Kubernetes | Cloud Builders: Java Conf 2023 | 2023-03-30 |
Live demos exploit two real scenarios: an open kubelet API on self‑managed EC2 nodes that allows unauthenticated command execution, and an RCE PHP workload… | ||
| Fast and Furious Multi-Cloud Connectivity | Jfokus 2023 | 2023-02-06 |
Architecture shows Kubernetes clusters in AWS GCP and Azure connected with either VPN or private links (Direct Connect Interconnect ExpressRoute via Megaport… | ||
| Fast and Furious Multi-Cloud Connectivity | JNation 2022 | 2022-06-07 |
Company implements multi-cloud across AWS GCP and Azure using Kubernetes, Terraform and Cilium, finds VPN unreliable for latency and routing spikes so uses… | ||
| The Hacker's Guide to JWT Security | JCON-ONLINE 2021 | 2021-10-05 |
Shows concrete failures: tokens are only base64 so claims leak, libraries accept a none algorithm bypass if verification uses parse not parseClaimsJws, HS256… | ||
| The Hacker's Guide to JWT Security | 4Developers 2021 | 2021-05-24 |
Four live demos expose practical JWT failures: acceptance of the none algorithm due to misleading library APIs, an HS256 secret cracked in ~15–20s with hashcat… | ||
| The Hacker's Guide to JWT Security | Devoxx Belgium 2019 | 2019-11-04 |
Demos show concrete failures: a library accepting "alg":"none" lets an attacker swap tokens and gain sessions, and poor APIs like parse vs parseClaimsJws cause… | ||
| Secure Authentication and Session Management in Java EE | Voxxed Days Vienna 2016 | 2016-03-16 |
Java EE does not secure authentication and sessions automatically; live demos exploit session IDs in URLs, network-sniffed cookies and XSS to hijack accounts… | ||
| Secure Authentication and Session Management in Java EE | Voxxed Days Bucharest 2016 | 2016-03-11 |
Live demos show session IDs leaking in URLs, being sniffed with TCPdump, swapped into a browser with Cookie Manager, exfiltrated via XSS (document.cookie… | ||
| Secure Authentication and Session Management | JavaDay Kyiv 2015 | 2015-11-06 |
Four live demos show session IDs leaking in URLs and cookies, hijacking via tcpdump and a browser cookie manager, XSS exfiltration using an image src to send… | ||
| Lazy Versus Eager Loading Strategies for JPA 2.1 | JavaDay Kyiv 2015 | 2015-11-06 |
Shows concrete JPA 2.1 fixes and gotchas: JPQL/native value-object projections and DB aggregation beat loading full entities in a 100,000-employee benchmark… | ||
| Automated Refactoring of Performance and Concurrency AntiPatterns | JDD 2012 | 2012-10-25 |
Yonita Optimizer is a source-to-source precompile refactoring tool that detects patterns like redundant work and long critical section and rewrites Java… | ||
| Security Vulnerabilities in OpenSource Java Libraries | JDD 2012 | 2012-10-25 |
Survey of NVD, OSVDB and Exploit-DB data finds Tomcat ≈100 CVEs while proprietary WebLogic/WebSphere each approach ~200 CVEs with many CVSS 9–10 criticals… | ||
| nothing matches | ||