Hackfest - Level UP

Clément Cruchet

As a Cybersecurity Solution Consultant at Palo Alto Networks and ethical hacking professor at the University of Sherbrooke, Clément Cruchet is backed by experience in offensive security, network security, and incident response. This provides a holistic view of the full attack lifecycle. In this talk, he applies this expertise to cloud identity platforms to show how attackers exploit OAuth implementations for persistent access.

Your twitter or other social network:

https://ca.linkedin.com/in/lutzenfried


Session

10-30
12:30
50min
OAuth Abuse & Exploitation: Implicit Trust is the New Attack Surface
Clément Cruchet

As a Cybersecurity Solution Consultant at Palo Alto Networks and ethical hacking professor at the University of Sherbrooke, Clément Cruchet is backed by deep experience in offensive security, network security, and incident response. This provides a holistic view of the full attack lifecycle. In this talk, he applies this expertise to cloud identity platforms, bridging the gap between theoretical OAuth RFC protocols and real-world exploitation, to show how attackers weaponize these implementations and how defenders can secure them.

Offensive
Track 2 (306A)