Sebastian Lekies
where else to find them
no profile links on file
what they talk about
where they keep going back
- Black Hat Europe2 editions2014–2015
all 4 in the filters
on a stage with
who talks about the same things
- Ben Stock16 talks
- Martin Johns14 talks
- Frederik Braun3 talks
- Benedek Gagyi8 talks
- Lavakumar Kuppan8 talks
- S. Lekies2 talks
| title | conference | date |
|---|---|---|
| Your Scripts In My Page - What Could Possibly Go Wrong? | Black Hat Europe 2015 | 2015-11-10 |
Demonstrates a practical attack called cross-domain script inclusion and a browser extension that fetches scripts with and without cookies to detect… | ||
| Client-Side Protection Against DOM-Base... | OWASP AppSec Research (AppSecEU) 2015 | 2015-05-19 |
A practical evaluation finds the built-in XSS auditor misses many DOM XSS cases: a taint-tracking crawler and automated exploit generator targets the Alexa top… | ||
| Client-Side Protection Against DOM-Based XSS Done Right (tm) | Black Hat Asia 2015 | 2015-03-24 |
Analysis finds 17 Chrome XSS Auditor flaws and a bypass toolkit that auto-generates exploits; running those probes against the Alexa Top 10k uncovers about… | ||
| Session Identifier are for Now, Passwords are Forever - XSS-Based Abuse of Browser Password Managers | Black Hat Europe 2014 | 2014-10-14 |
Cross-site scripting lets JavaScript read passwords because browser managers insert plaintext into the DOM; major browsers differ — only Internet Explorer… | ||
| Call To Arms: A Tale of the Weaknesses of Current Client-Side XSS Filtering | Black Hat USA 2014 | 2014-08-02 |
Analysis shows Chrome's XSS Auditor has concrete weaknesses: a static code review finds 17 flaws, an automatic exploit generator (taint-tracking patched… | ||
| nothing matches | ||