Hackfest - Level UP

Clément Cruchet

As a Cybersecurity Solution Consultant at Palo Alto Networks and ethical hacking professor at the University of Sherbrooke, Clément Cruchet is backed by experience in offensive security, network security, and incident response. This provides a holistic view of the full attack lifecycle. In this talk, he applies this expertise to cloud identity platforms to show how attackers exploit OAuth implementations for persistent access.

Votre compte twitter ou autre réseau social:

https://ca.linkedin.com/in/lutzenfried


Intervention

30/10
12:30
50minutes
OAuth Abuse & Exploitation: Implicit Trust is the New Attack Surface
Clément Cruchet

As a Cybersecurity Solution Consultant at Palo Alto Networks and ethical hacking professor at the University of Sherbrooke, Clément Cruchet is backed by deep experience in offensive security, network security, and incident response. This provides a holistic view of the full attack lifecycle. In this talk, he applies this expertise to cloud identity platforms, bridging the gap between theoretical OAuth RFC protocols and real-world exploitation, to show how attackers weaponize these implementations and how defenders can secure them.

Offensive
Track 2 (306A)