Explore unique attack vectors for exploiting API webhooks in this 34-minute conference talk from NorthSec 2022. Discover how to perform Server-Side Request Forgery (SSRF) attacks that can potentially lead to cloud compromise, gaining insights into the vulnerabilities of modern web services' webhook implementations.
Overview
Syllabus
NSEC2022- Abhay Bhargav - Hook, Line and Sinker - Pillaging API Webhooks
Taught by
NorthSec
Related Courses
-
Hook, Line and Sinker - Pillaging API Webhooks
-
Webhooks Hookups - Abusing API Developers
-
API-Induced SSRF - How Apple Pay Scattered Vulnerabilities Across the Web
-
SSRF vs Business Critical Applications
-
The 3 Way Bypass Surgery - Abusing Content Delivery Networks with Server Side Request Forgery - SSRF
-
Owning the Cloud Through SSRF
