Soheil Khodayari
where else to find them
what they talk about
where they keep going back
no series more than once — all 3 in the filters
on a stage with
never shared a talk
who talks about the same things
- Dheeraj Joshi3 talks
- Martin Johns14 talks
- Gareth Heyes5 talks
- Luca Compagna3 talks
- S. Lekies2 talks
- Lavakumar Kuppan8 talks
| title | conference | date |
|---|---|---|
| Navigating The Landscape Of Client-Side Request Hijacking On The Web | Global AppSec Lisbon 2024 | 2024-06-24 |
Claims that client-side request hijacking is widespread and practical: analysis of ~1M pages finds 7.9M API calls, 202,000 verified data flows across 961 sites… | ||
| Everything You Wanted to Know About DOM Clobbering (But Were... | RuhrSec 2023 | 2023-05-11 |
Presents concrete results: an automated static+dynamic detector (available at joe.me) and a markup generator (domcloud.xyz) that exhaustively tests clobbering… | ||
| Everything You Wanted to Know About Client side CSRF But Were Afraid to Ask | OWASP 2022 Global AppSec Europe Virtual Event | 2022-11-04 |
Claims that a new class of client-side CSRF can bypass traditional defenses and quantifies it with a working tool: JOE hybrid property graph crawls and models… | ||
| nothing matches | ||