#NahamCon2022EU: Hunting for Amazon Cognito Security Misconfigurations by@yassineaboukir

https://www.youtube.com/watch?v=TuiDJ5Ii6MU

#NahamCon2022EU: Hunting for Amazon Cognito Security Misconfigurations by@yassineaboukir

YouTube

#NahamCon2022EU: I Hope This Sticks: Analyzing ClipboardEvent Listeners for XSS by spaceraccoon

https://www.youtube.com/watch?v=N2UguYUecvQ

#NahamCon2022EU: I Hope This Sticks: Analyzing ClipboardEvent Listeners for XSS by spaceraccoon

YouTube

#NahamCon2022EU: RTFR (Read The Bleeping RFC)" by securinti

https://www.youtube.com/watch?v=4ZsTKvfP1g0

#NahamCon2022EU: RTFR (Read The Bleeping RFC)" by securinti

YouTube

#NahamCon2022EU: Command-Line Data-Wrangling by Tomnomnom

https://www.youtube.com/watch?v=QSq-aYYQpro

#NahamCon2022EU: Command-Line Data-Wrangling by Tomnomnom

YouTube
Super cool research and talk
---
RT @spaceraccoonsec
At #NahamCon2022EU, I shared about an interesting vulnerability in Zoom clients that taught a lot about code review and crafting payloads. Check out the accompanying blogpost at https://spaceraccoon.dev/analyzing-clipboardevent-listeners-stored-xss/ and @nahamsec should share the slides soon!
https://twitter.com/spaceraccoonsec/status/1604137975977164806
I Hope This Sticks: Analyzing ClipboardEvent Listeners for Stored XSS

When is copy-paste payloads not self-XSS? When it’s stored XSS. Recently, I reviewed a Zoom’s code to uncover an interesting attack vector.

#NahamCon2022EU: Story of an RCE on Apple Through Hot Jar Swapping by Frans Rosen

https://www.youtube.com/watch?v=A-O-irpqUWQ

#NahamCon2022EU: Story of an RCE on Apple Through Hot Jarr Swapping by Frans Rosen

YouTube

#NahamCon2022EU: Command-Line Data-Wrangling by Tomnomnom

https://www.youtube.com/watch?v=QSq-aYYQpro

#NahamCon2022EU: Command-Line Data-Wrangling by Tomnomnom

YouTube

#NahamCon2022EU: Story of an RCE on Apple Through Hot Jarr Swapping by Frans Rosen

https://www.youtube.com/watch?v=A-O-irpqUWQ

#NahamCon2022EU: Story of an RCE on Apple Through Hot Jarr Swapping by Frans Rosen

YouTube

What a pleasure for @[email protected] to support #NahamCon2022EU 🀩

Hosted by @[email protected] and @[email protected], the 2022 edition will include great talks about offensive security and bug bounties along with a CTF challenge. Don't miss the live event on Saturday!

πŸ‘‰ https://blog.yeswehack.com/events/nahamcon-europe-2022/

NahamCon Europe 2022 - Global Bug Bounty Platform

YesWeHack is a proud sponsor of NahamCon Europe 2022. Be sure to join the free streamed live event on December 17!

Global Bug Bounty Platform