Keynote Day 2 | Hunting Evasive Vulnerabilities: Finding Flaws That Others Miss by James Kettle

This session addresses the topic of evasive vulnerabilities that often remain undetected during security audits. The speaker, James Kettle, shares insights from his decade-long research in web security, revealing how various factors contribute to the concealment of both individual bugs and entire classes of attacks. He provides attendees with specific techniques and broad principles for identifying overlooked flaws, as well as common pitfalls to avoid in the search for vulnerabilities. Kettle's experience as the Director of Research at PortSwigger adds credibility, as he discusses innovative strategies in web hacking and shares lessons learned from his notable work in the cybersecurity community.