Talks

A selection of my conference talks and speaking engagements.

2026

Black Hat USA 2026 — Las Vegas

Pre-auth RCE in Enterprise Java: When Middleware Becomes the Exploit Briefings, August 5–6 2026, Mandalay Bay Convention Center. Real-world pre-auth RCE chains in widely deployed enterprise Java platforms — reaching internal execution surfaces through routing logic, dispatcher behavior, and unsafe object construction paths.

HK-Hack 2026 — Hong Kong

Pre-auth RCE in Enterprise Java: When Middleware Becomes the Exploit

TyphoonCon 2026 — Seoul

Pre-auth RCE in Enterprise Java: When Middleware Becomes the Exploit Agenda

2025

Black Hat Europe 2025 — ExCeL London

Ghosts in the DOM: Hunting and Exploiting Hidden postMessage Listeners using the FrogPost Extension December 8–11 2025. Track: Exploitation and Ethical Hacking. Using FrogPost to dynamically discover hidden postMessage handlers, identify common sinks, and build exploitation payloads.

2024

BlueHat IL 2024

Climbing Azure’s Peaks: From 80+ to Top 10, One Bug at a Time

2023

BlueHat IL 2023 — with Roee Sagi

CosMiss & FabriXss

BlueHat 2023

Speaker.