Loading…
BSidesSF 2022 has ended
Back To Schedule
Sunday, June 5 • 1:30pm - 2:20pm
Hook, Line and Sinker - Pillaging API Webhooks

Sign up or log in to save this to your schedule, view media, leave feedback and see who's attending!

Tweet Share
Feedback form is now closed.
Webhooks are an important part of modern web services. In this talk, I will demonstrate “Webhook Boomerang flaws,” a unique set of attack vectors that allows us to perform SSRF against webhooks leading to cloud-credential compromise even with security protections like Metadata Headers.
Speakers
AB

Abhay Bhargav

we45
Abhay Bhargav is the Founder of we45, a focused Application Security Company and the Chief Research Officer of AppSecEngineer, an elite, hands-on online training platform for AppSec, Cloud-Native Security, Kubernetes Security and DevSecOps. Abhay started his career as a breaker... Read More →

Sunday June 5, 2022 1:30pm - 2:20pm PDT
Embarcadero
  Talk