Topic

Vulnerability Research talks at BSides

570 talks tagged Vulnerability Research from 95 chapters of BSides events worldwide.

Top-Tier Bug Bounty Hunter Mindset

Yassine Aboukir

BSides Ahmedabad · 2022

Career Career & Soft Skills Vulnerability Research Intermediary Red Keynote

Open →2023-02

Bug Bounty on Steroids

BSides Ahmedabad · 2023

Technical Vulnerability Research Web AppSec Intermediary Red Talk

Open →2023-02

The Power of Recon

BSides Ahmedabad

Technical OSINT Vulnerability Research Web AppSec Red Talk

Open →2024-05

Exploit Development Is Dead, Long Live Exploit Development!

BSides KC · 2021

Technical Reverse Engineering Vulnerability Research Advanced Red Case Studies and Incidents Analysis Technical Deep-dives Talk

Open →2021-11

Demystifying Bug Bounties: Insights from a Decade of Experience

Yassine Aboukir

BSides Prishtina · 2023

Technical Supply Chain Security Vulnerability Research Red Talk

Open →2023-05

Web security is fun (or how I stole your Google Drive files)

BSides Tallinn · 2024

Technical Vulnerability Research Web AppSec Talk

Open →2024-10

Hacking AAA Unreal Engine Games with Python

BSides Cape Town · 2023

Technical Reverse Engineering Vulnerability Research Red Demo Talk

Open →2023-12

How to Write Your First Nuclei Template

BSides Ahmedabad

Technical Vulnerability Research Web AppSec Talk

Open →2023-02

Shellcoding basics

BSides Charleston · 2016

Technical CTF Reverse Engineering Vulnerability Research Intermediary Red Talk

Open →2016-11

Automating Web Application Bug Hunting

Jerry Gamblin Jonathan Cran

BSidesSF · 2019

Technical OSINT Vulnerability Research Web AppSec Talk

Open →2019-03

Easy LPEs and Common Software Vulnerabilities

Christopher Vella

BSides Canberra · 2021

Technical Reverse Engineering Vulnerability Research Talk

Open →2021-04

AI WILL TAKE UR JOB!

BSides Lisbon · 2024

Career Career & Soft Skills Vulnerability Research Keynote

Open →2024-11

DOM Based Angular Sandbox Escapes

BSides Manchester · 2017

Technical Vulnerability Research Web AppSec Advanced Red Technical Deep-dives Talk

Open →2017-08

Source Code Security Audit Speed Run

Eldar Marcussen

BSides Canberra · 2019

Technical Vulnerability Research Web AppSec Talk

Open →2019-05

BSIDESLV 2018 - Breaking Ground - Day Two

BSides Las Vegas · 2018

Technical Hardware Hacking Mobile Security Reverse Engineering Vulnerability Research Talk

Open →2018-08

Introduction to Return Oriented Exploitation on ARM64

BSides Manchester · 2018

Technical Reverse Engineering Vulnerability Research Intermediary Red Talk

Open →2018-08

Client-Side to Critical

Satyam Gothi Kuldeep Pandya

BSides Ahmedabad · 2025

Technical Vulnerability Research Web AppSec Red Talk

Open →2025-05

Smashing the Stack to Building ROP Chains with Gadgets

BSides Charlotte · 2016

Technical Reverse Engineering Vulnerability Research Intro Red Demo

Open →2016-05

Local Admin in less than 60 seconds

BSides Budabest · 2024

Technical Active Directory Kerberos Vulnerability Research Red Technical Deep-dives Talk

Open →2025-01

Tale of Chaining Bugs for Account Takeover

BSides Ahmedabad · 2022

Technical Vulnerability Research Web AppSec Red Case Studies and Incidents Analysis Talk

Open →2023-02

Hacking Minds with Ansh Bhawanani

BSides Noida · 2024

Career Career & Soft Skills Vulnerability Research Talk

Open →2024-12

Yassine Aboukir: Bug Bounty, Authentication Vulnerabilities, and Hacker Collaboration

Yassine Aboukir

BSides Ahmedabad · 2023

Career Vulnerability Research Web AppSec Red Talk

Open →2023-02

Pwning Cloud Contexts: From GitHub Token to Compromising an Entire GCP Organization

BSides Ahmedabad · 2024

Technical Cloud IAM Supply Chain Security Vulnerability Research Red Case Studies and Incidents Analysis Technical Deep-dives Talk

Open →2024-04

Fighting Secrets In Source Code With TruffleHog

BSidesSF · 2018

Technical Tooling DevSecOps Supply Chain Security Vulnerability Research Talk

Open →2018-04

Web Application Vulnerability Scanners: An Introduction & Discussion on Their Limitations

BSides Cape Town · 2019

Technical Vulnerability Research Web AppSec Talk

Open →2019-12

What the DLL? Finding and Exploiting DLL Preloading Vulnerabilities

BSides Cape Town · 2016

Technical Reverse Engineering Vulnerability Research Red Demo Talk

Open →2016-12

BsidesLV 2025 - Ground Floor - Monday

BSides Las Vegas · 2025

Technical Cloud IAM OSINT Vulnerability Research Red Talk

Open →2025-08

No Code Execution? No Problem! — Living The Age of Virtualization-Based Security

BSides KC · 2022

Technical Reverse Engineering Vulnerability Research Advanced Red Technical Deep-dives Talk

Open →2022-10

Time Traveling Exploitation: Remote Code Execution in a 10,000 Day Old Game Protocol

BSides Canberra · 2025

Technical Reverse Engineering Vulnerability Research Advanced Red Demo Talk

Open →2025-12

PHP Execute After Redirect to SQL Injection

BSides Ahmedabad · 2022

Technical Vulnerability Research Web AppSec Red Demo

Open →2023-02

Journey to Command Injection: Hacking the Lenovo ix4-300d

BSidesSF · 2019

Technical Hardware Hacking Vulnerability Research Web AppSec Intermediary Red Demo

Open →2019-03

How to Sink a UBoot: Understanding Bootloader Attack Surface

BSides Cape Town · 2023

Technical Hardware Hacking Reverse Engineering Vulnerability Research Talk

Open →2023-12

Playing with Fake Emails for Fun and Profit

BSides Ahmedabad · 2022

Technical Vulnerability Research Web AppSec Red Case Studies and Incidents Analysis Talk

Open →2023-02

Lightning fast CTF solving - Automatic Exploit Generation & Side Channel Analysis

Christopher Roberts

Technical CTF Reverse Engineering Vulnerability Research Advanced Red Talk

Open →2018-11

Macabre Stories of a Hacker in the Public Health Sector (Chile)

Philippe Delteil

BSides Cape Town · 2019

War Stories DFIR Privacy Vulnerability Research Blue Case Studies and Incidents Analysis Talk

Open →2019-12

Attack of the Graph: Visual Tools for Cyber Analysis

Christian Miles

BSides Vancouver · 2021

Technical Threat Intel Threat Modeling Vulnerability Research Talk

Open →2021-06

Continuous Integration: Stalking Vulnerabilities with Puma Scan

BSides Iowa · 2017

Technical DevSecOps Vulnerability Research Case Studies and Incidents Analysis Talk

Open →2017-04

Mastering Android Security Research: A Guide for the Modern Security Researcher

Hahna Latonick Jacob Swinsinski

BSides Tampa · 2024

Technical Mobile Security Reverse Engineering Vulnerability Research Intermediary Red Talk

Open →2024-05

Navigating Bug Bounties: From NAs to P1s

Animesh Acharya

BSides Canberra · 2025

Career Vulnerability Research Web AppSec Red Case Studies and Incidents Analysis Talk

Open →2025-11

Pwning Android Apps at Scale

Sparsh Shashank

BSides Ahmedabad

Research Technical Mobile Security Supply Chain Security Vulnerability Research Advanced Red Case Studies and Incidents Analysis+2

Open →2023-02

Walkthrough of an N-day Android GPU driver vulnerability

BSides Canberra · 2025

Technical Hardware Hacking Mobile Security Vulnerability Research Advanced Red Talk

Open →2026-03

Not All Vulnerabilities Are The Same

BSides Canberra · 2025

Research Vulnerability Research Web AppSec Keynote

Open →2025-12

Easy Ways to Bypass Antivirus Systems

BSides London · 2014

Technical Malware Analysis Reverse Engineering Vulnerability Research Red Demo Talk

Open →2014-05

ByteSweep: A Free Software IoT Security Analysis Platform

BSides Las Vegas · 2019

Technical Tooling IoT Reverse Engineering Vulnerability Research Demo Talk

Open →2019-10

Race Against the Machine: Rapid Exploit Development via LLMs

BSides Augusta · 2023

Research Technical AI Security Vulnerability Research Empirical Research Technical Deep-dives Talk

Open →2023-10

Malware Analysis — Red Team Edition

BSides Las Vegas · 2022

Technical Malware Analysis Vulnerability Research Advanced Red Demo Talk

Open →2022-09

The Dark Side of DeFi

Rudra Singh Arbaz Hussain

BSides Ahmedabad · 2022

Technical Smart Contract Security Vulnerability Research Web AppSec Intermediary Technical Deep-dives Talk

Open →2023-02

Exploiting Alpine Linux: From vulnerability discovery to code execution

Ariel Zelivansky

BSides DC · 2017

Technical Container Security Vulnerability Research Technical Deep-dives Talk

Open →2017-10

Automated Security Scanning of GraphQL APIs with Burp

BSides Toronto · 2022

Technical Vulnerability Research Web AppSec Demo Talk

Open →2022-10

Exploit Prediction Scoring System (EPSS) - The User Guide - Chris Madden

BSides Dublin · 2024

Technical Threat Intel Vulnerability Research Empirical Research Methodology Talk

Open →2024-06

Living With Kodi And A Hole In Your Network

Yevgen Goncharuk

BSides Lisbon · 2018

Technical IoT Malware Analysis Vulnerability Research Talk

Open →2018-12

Return-Oriented Exploitation on ARM

BSides Budabest · 2019

Technical Reverse Engineering Vulnerability Research Advanced Red Technical Deep-dives Demo Talk

Open →2019-06

The Next Generation of Web Exploits: From Cache Poisoning to Multi-Layer Fingerprinting

Bsides CT · 2025

Technical Vulnerability Research Web AppSec Empirical Research Technical Deep-dives Talk

Open →2025-12

Hacking a Hackathon for Fun and Profit

Alexei Kojenov Alex Ivkin

BSides PDX · 2018

Technical Supply Chain Security Vulnerability Research Web AppSec Red Case Studies and Incidents Analysis Talk

Open →2018-03

Knock Knock. Race Condition. Who's There?

BSides Cape Town · 2025

Technical Vulnerability Research Web AppSec Talk

Open →2025-12

Bypassing Huawei's Fingerprint Authentication by Exploiting the TrustZone

BSides DC · 2018

Technical Hardware Hacking Mobile Security Vulnerability Research Advanced Red Case Studies and Incidents Analysis Technical Deep-dives+2

Open →2018-11

From Firmware to Exploit

Michael Messner

BSides Las Vegas · 2023

Technical Tooling Firmware Security IoT Reverse Engineering Vulnerability Research Intermediary Technical Deep-dives+1

Open →2023-10

Deep Dive into Clouded Waters: Penetration Testing and Security in DigitalOcean

BSides Prishtina · 2023

Technical Cloud IAM Vulnerability Research Talk

Open →2023-05

Pasten: Capture the Flag

Danny Grander Yuval Ofir

BSides TLV · 2019

Technical CTF Reverse Engineering Vulnerability Research Advanced Red Talk

Open →2019-11

Crash all the Flying Things! — Exploiting and Defending Aircraft Collision Avoidance

BSides London · 2015

Technical Hardware Hacking Threat Modeling Vulnerability Research Advanced Red Technical Deep-dives Talk

Open →2015-07

Finding & Exploiting Client-Side Prototype Pollution in the Wild

BSides Ahmedabad · 2021

Technical Vulnerability Research Web AppSec Red Case Studies and Incidents Analysis Methodology Talk

Open →2022-02

Supercharge Your Workflow: Using WhiteRabbitNeo for AI-Powered Analysis

Bailey Williams

BSides Charm · 2025

Technical AI Security DevSecOps Vulnerability Research Red Talk

Open →2025-05

Bypassing AppLocker Protection by Manipulating Its Cache

Grzegorz Tworek

BSides Prishtina · 2023

Technical Reverse Engineering Vulnerability Research Red Technical Deep-dives Talk

Open →2023-05

Responsible Vulnerability Disclosure

Stoyan Kolev Lyubomir Vanyov Vladimir Dimitrov

BSides Sofia · 2022

Vulnerability Research Panel

Open →2022-04

Mastering Bug Bounty: The Secrets of hunting bugs by Devansh Chauhan

Devansh Chauhan

BSides Noida · 2024

Career Vulnerability Research Web AppSec Intro Talk

Open →2024-11

Java Serialization Attacks

BSides Peru · 2017

Technical Vulnerability Research Web AppSec Technical Deep-dives Talk

Open →2017-07

Subdomain Takeovers

BSides Newcastle · 2022

Technical DNS Security Vulnerability Research Web AppSec Intermediary Red Case Studies and Incidents Analysis Methodology+1

Open →2022-09

Beyond Quick Cash: Rethinking Bug Bounties for Greater Impact

Jayson Grace Farah Hawa

BSidesSF · 2024

Community Vulnerability Research Talk

Open →2024-07

Game Hacking for Security Professionals

Max Harley Nick Powers

BSides Charleston · 2024

Technical Reverse Engineering Vulnerability Research Red Demo Talk

Open →2024-11

Kamil Frankowicz

BSides Warsaw · 2016

Technical Vulnerability Research Technical Deep-dives Talk

Open →2016-10

Adventures in Asymmetric Warfare: Fighting the AV Vendors

BSides DC · 2014

Technical Malware Analysis Reverse Engineering Vulnerability Research Advanced Red Technical Deep-dives Talk

Open →2014-10

BSides Noida : Day - 1

Fardeen Ahmad Sourav Kumar Kavisha Sheth Philippe Humeau

BSides Noida · 2021

Technical Cloud IAM Vulnerability Research Web AppSec Talk

Open →2021-08

Well well well, if it isn't the consequences of my own actions

BSides Canberra · 2025

Technical Cryptography Supply Chain Security Vulnerability Research Advanced Case Studies and Incidents Analysis Technical Deep-dives Talk

Open →2025-12

Testy bezpieczeństwa infrastruktury w przerwie na herbatę. Czy to możliwe?

Krystian Działowy

BSides Warsaw · 2024

Technical Network Security Vulnerability Research Demo Talk

Open →2024-07

Diaphora: a new FOSS program diffing tool

BSides Lisbon · 2015

Technical Reverse Engineering Vulnerability Research Intermediary Blue Technical Deep-dives Talk

Open →2015-07

Static Code Analysis, from Source to Sink

BSides Manchester · 2015

Technical Vulnerability Research Web AppSec Talk

Open →2015-09

Hacking Companies For Internet Glory While Not Dying In A Sarlacc Pit

BSides Leeds · 2019

Technical OSINT Vulnerability Research Web AppSec Red Talk

Open →2019-01

Anyone Can Hack APIs: A Crash Course For Pentesters And Bug Bounty Hunters

BSides London · 2025

Technical Vulnerability Research Web AppSec Red Talk

Open →2026-03

A Two-part Saga: Continuing the Journey of Hacking Malware C2s

Vangelis Stykas

BSides Prague · 2024

Technical Malware Analysis Vulnerability Research Web AppSec Red Case Studies and Incidents Analysis Technical Deep-dives Talk

Open →2024-04

Ding Dong The EDR is DEAD

BSides Canberra · 2025

Technical Reverse Engineering Vulnerability Research Advanced Red Technical Deep-dives Talk

Open →2025-12

Breaking COMposure: Journey to Hunting Windows COM Vulnerabilities

BSides Canberra · 2025

Technical Vulnerability Research Advanced Red Talk

Open →2025-12

Attacking GraphQL: A Guide for Penetration Testers

BSides Cape Town · 2025

Technical Vulnerability Research Web AppSec Red Talk

Open →2025-02

Pwning Electric Motorcycles

Mitchell Marasch Persephone Karnstein

BSides Seattle · 2026

Research Technical Hardware Hacking Reverse Engineering Vulnerability Research Advanced Red Case Studies and Incidents Analysis+2

Open →2026-03

Your Critical System IS (NOT?) Vulnerable: CSAF, VEX, SBOM and the Future of Advisories

Allan Friedman Jens Wiesner

BSides Las Vegas · 2021

Policy Technical Supply Chain Security Vulnerability Research Talk

Open →2021-08

BADPDF: Stealing Windows Credentials via PDF Files

Ido Solomon Adi Ikan

BSidesSF · 2019

Technical Network Security Vulnerability Research Web AppSec Red Technical Deep-dives Talk

Open →2019-03

Hardware Hacking: DVRs and Dildos

BSides Scotland 2017

Technical Hardware Hacking IoT Reverse Engineering Vulnerability Research Advanced Red Keynote

Open →2017-11

Modern Linux Kernel Mitigations

Ray Veldkamp Matthew Kurz

BSides Canberra · 2023

Technical Vulnerability Research Blue Technical Deep-dives Talk

Open →2023-10

From MS08-067 to EternalBlue

BSides Manchester · 2017

Technical Reverse Engineering Vulnerability Research Advanced Red Case Studies and Incidents Analysis Technical Deep-dives Talk

Open →2017-08

Como Hackear um Banco sem Sair do seu Quarto?

Arthur Aires Matheus Wreck Gustavo Oliveira

BSides São Paulo · 2025

Technical War Stories Reverse Engineering Vulnerability Research Web AppSec Advanced Red Talk

Open →2025-06

Practical Serialization Attacks

BSides Manchester · 2017

Technical Reverse Engineering Vulnerability Research Web AppSec Advanced Red Case Studies and Incidents Analysis Technical Deep-dives+1

Open →2017-08

Life of a Bug: An Insight on the GitHub Bounty Program

Jeffrey Guerra Caitlin Buckshaw

BSidesSF · 2023

Technical Vulnerability Research Blue Case Studies and Incidents Analysis Talk

Open →2023-05

You Don't See Me: Abusing Whitelists to Hide and Run Malware

Michael Spaling

BSides Las Vegas · 2016

Technical Malware Analysis Vulnerability Research Red Talk

Open →2016-08

EmailShell: A War Story On Leveraging Server Side Template Injection (SSTI) To Hack Into GCP

BSides London · 2025

Technical Vulnerability Research Web AppSec Red Case Studies and Incidents Analysis Talk

Open →2026-03

Hidden Networks Pivoting: Redefining DNS Rebinding Attack

Tomer Zait Nimrod Levy

BSides Las Vegas · 2019

Technical Network Security Vulnerability Research Web AppSec Advanced Red Talk

Open →2019-10

Introduction to OWASP Juice Shop

Tim Corless-Carter

BSides Manchester · 2019

Technical OWASP Vulnerability Research Web AppSec Intro Red Demo

Open →2019-09

Getting Things Fixed: Security Wins and Fails

BSides SLC · 2025

War Stories Cloud IAM Vulnerability Research Keynote

Open →2025-06

SniffAir – An Open-Source Framework for Wireless Security Assessments

Steven Darracott Matthew Eidelberg

BSides Las Vegas · 2017

Technical Tooling Vulnerability Research Wireless Security Demo Talk

Open →2017-08

Dirty Stream Attack: Turning Android Share Targets into Attack Vectors

Dimitrios Valsamaras

BSides Lisbon · 2023

Technical Mobile Security Vulnerability Research Red Talk

Open →2024-02

Infrastructure as RCE: How to abuse Terraform to elevate access

BSides NYC · 2023

Technical Cloud IAM DevSecOps Vulnerability Research Red Talk

Open →2023-06

L0ss sans C St0 - PAMdemonium! Privileged Access Management

BSides Perth · 2023

Technical Active Directory Cryptography Vulnerability Research Advanced Red Technical Deep-dives Talk

Open →2023-08

View all 570 talks tagged Vulnerability Research →