BSidesSF 2026 - Red Teaming from outside: Identifying and exploiting SaaS systems... (Rojan Rijal)

This talk, presented by Rojan Rijal, delves into the vulnerabilities of SaaS applications as a modern attack surface contributing to significant information leaks. The speaker discusses various exploitation techniques used against prominent companies, including Netflix, and shares a live demonstration of a complete exploit leading to internal compromise. Attendees will gain insights into the security challenges associated with SaaS systems and learn practical methods for identifying and exploiting these vulnerabilities.