BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//cfp.hackfest.ca//hf2026//speaker//HGJL9V
BEGIN:VTIMEZONE
TZID:EST
BEGIN:STANDARD
DTSTART:20001029T030000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=10;UNTIL=20061029T070000Z
TZNAME:EST
TZOFFSETFROM:-0400
TZOFFSETTO:-0500
END:STANDARD
BEGIN:STANDARD
DTSTART:20071104T030000
RRULE:FREQ=YEARLY;BYDAY=1SU;BYMONTH=11
TZNAME:EST
TZOFFSETFROM:-0400
TZOFFSETTO:-0500
END:STANDARD
BEGIN:DAYLIGHT
DTSTART:20000402T030000
RRULE:FREQ=YEARLY;BYDAY=1SU;BYMONTH=4;UNTIL=20060402T080000Z
TZNAME:EDT
TZOFFSETFROM:-0500
TZOFFSETTO:-0400
END:DAYLIGHT
BEGIN:DAYLIGHT
DTSTART:20070311T030000
RRULE:FREQ=YEARLY;BYDAY=2SU;BYMONTH=3
TZNAME:EDT
TZOFFSETFROM:-0500
TZOFFSETTO:-0400
END:DAYLIGHT
END:VTIMEZONE
BEGIN:VEVENT
UID:pretalx-hf2026-S7AJFF@cfp.hackfest.ca
DTSTART;TZID=EST:20261031T143000
DTEND;TZID=EST:20261031T152000
DESCRIPTION:SQL injection is dead. Local file inclusion is a relic. And tha
 t PDF generator surely can’t be used to pivot into an internal network
 … right?\n\nWell\, think again.\n\nIn this presentation\, we will explor
 e web application exploits that (surprisingly) still let me in. The kind t
 hat have great impact\, that should have disappeared years ago\, yet still
  show up in real-world engagements. Well\, if you can get them to work. Th
 ey might be buried in business logic or something else.\n\nThis is what yo
 u will get from this presentation\; that with a bit of wit and know how\, 
 you can turn a seemingly not exploitable vulnerability into a critical fin
 ding\, even those that should not be out there anymore.\n\nOh\, and this i
 s not just a theoretical talk\, there will be demos\, and there will be co
 de analysis.
DTSTAMP:20261014T080433Z
LOCATION:Track 3 (2104AB)
SUMMARY:I Can’t Believe This Works: Web Exploits that Still Let Me In - G
 uillaume Croteau
URL:https://cfp.hackfest.ca/hf2026/talk/S7AJFF/
END:VEVENT
END:VCALENDAR