Name: Decoding GraphQL: How to Map Hidden Vulnerabilities
Start: 2025-04-26T15:00:00-0700
End: 2025-04-26T15:30:00-0700

Saturday April 26, 2025 3:00pm - 3:30pm PDT

AMC Theatre 09

GraphQL APIs offer flexibility and efficiency but often introduce security risks that remain hidden in the shadows. In this session, we’ll share findings from scanning GraphQL APIs, revealing vulnerabilities like schema leaks, brute-force risks, and GraphQL-specific "bomb" attacks.

Speakers

Antoine Carossio

Cofounder & CTO, Escape.tech

Former pentester for the French Intelligence Services.Former Machine Learning Research @ Apple. linkedin.com/in/acarossio/ escape.tech (company) @iCarossio escape.tech (blog... Read More →

Tristan Kalos

Co-founder and CEO, Escape

Tristan Kalos, co-founder and CEO at Escape, draws from a background as a software engineer and Machine Learning Researcher at UC Berkeley. Motivated by firsthand experience witnessing a client's database stolen through an API in 2018, he has since become an expert in API security... Read More →

Saturday April 26, 2025 3:00pm - 3:30pm PDT
AMC Theatre 09 AMC at Metreon

Presentation, General

BSidesSF 2025

Antoine Carossio

Tristan Kalos

Sign up or log in to save this to your schedule, view media, leave feedback and see who's attending!