::: left till the conference

Materials

Main Stage

Videos of the track

Presentations

Спикер

Доклад

Материалы

Taras Ivashchenko (OZON)

2011 <= APP_SECURITY <= 2021

Slides

Video

Alexander Ermolov , Dmitry Frolov

Data-only attacks against UEFI BIOS

Slides

Video

Alexander Tarasikov

Exploring the Galaxy. Building emulators to find vulnerabilities in modern phones

Slides

Video

Alex Kovrizhnykh (@a1exdandy)

Exploiting checkm8 with unknown SecureROM for the T2 chip

Slides

Video

Maxim Goryachy , Mark Ermolov , Dmitry Sklyarov

Chip Red Pill: How we achieved to execute arbitrary [micro]code inside Intel Atom CPUs

Slides

Video

Dima Turchenkov

LPE in Ring -3 / Intel ME

Slides

Video

Aleksei “GreenDog” Tiurin (@antyurin)

Weird proxies/2 and a bit of magic

Slides

Video

Alexander Popov

Improving the exploit for CVE-2021-26708 in the Linux kernel to bypass LKRG

Slides

Video

Ivan Agarkov

8 ways to spy on your consoles

Slides

Video

Andrey Zhukov

Lateral movement automation

Slides

Video

Unnamed user , ValdikSS

Trojans and backdoors in feature phones sold in Russia

Slides

Video

Max Dmitriev

Apache 0day bug, which still nobody knows of, and which was fixed accidentally

Slides

Video

Aleksandr Kolchanov

Thank you for using URL shorteners: I know everything about your clients now

Slides

Video

Web Village

Videos of the track

Presentations

Спикер

Доклад

Материалы

Anton “Bo0oM” Lopanitsyn (@i_bo0om)

Slides

Pavel Sorokin

Slides

Video

Valeriy “krevetk0” Shevchenko (@Krevetk0Valeriy)

Fantastic bugs and where to find them

Slides

Video

Emil Lerner (@emil_lerner)

Slides

Video

Alexey “SooLFaa” Morozov (@xSooLFaa)

Hacker adventures on dating websites

Slides

Video

Nikita Stupin (@nikitastupin) , Sergey “BlackFan” Bobrov (@black2fan)

New ways to alert: Prototype Pollution

Slides

Video

Paul Axe (@Paul_Axe)

JVMyachni Otake

Slides

Video

Alex Savelyev (Digital Security Academy)

Server exploitation of Prototype Pollution vulnerability

Slides

Video

Defensive Track

Videos of the track

Presentations

Спикер

Доклад

Материалы

Denis Rybin

Metrics in practice

Slides

Video

Dmitriy Evdokimov (@evdokimovds)

Container escapes: Kubernetes edition

Slides

Video

Aleksei Meshcheriakov , Alexander Kaleda , Evgenii Protsenko

Company wide SAST

Slides

Video

Denis Efremov

CVEhound: check Linux sources for known CVEs

Slides

Video

Ilya Zuev

IPMI backdoor not with your own hands

Slides

Video

Vatclav Dovnar

Open Source DevSecOps: Tempest in a teapot

Slides

Video

Alexander Barabanov

Attacking the microservice applications: methods and practical tips

Slides

Video

Dmitriy Teryoshin

The invisible hand of AppSec in release builds

Slides

Video

Up