Hook, Line and Sinker - Pillaging API Webhooks

Abhay Bhargav - Hook, Line and Sinker - Pillaging API Webhooks Webhooks are an important part of modern web services. In this talk, I will demonstrate “Webhook Boomerang flaws,” a unique set of attack vectors that allows us to perform SSRF against w...

Abhay Bhargav - Hook, Line and Sinker - Pillaging API Webhooks

Webhooks are an important part of modern web services. In this talk, I will demonstrate “Webhook Boomerang flaws,” a unique set of attack vectors that allows us to perform SSRF against webhooks leading to cloud-credential compromise even with security protections like Metadata Headers.

Sched: https://bsidessf2022.sched.com/event/rjqH/hook-line-and-sinker-pillaging-api-webhooks