Rana
Rana Khalil is a distinguished red team consultant, with a decade of experience in penetration testing, securing development pipelines, and building comprehensive application security programs. Beyond her technical expertise, Rana is a recognized international speaker, having presented at leading conferences including BlackHat. She is also the founder of an online academy with over 25,000 students, where she shares her extensive knowledge by teaching students how to hack and secure web applications.
Session
This talk presents a real-world penetration test of a global platform with over 30 million users, where a series of seemingly isolated vulnerabilities were transformed into a complete attack chain that resulted in full system compromise.
Attendees will follow the attacker's path as trust boundaries are systematically dismantled through exposed secrets in public JavaScript, session abuse, cross-application trust violations, and critical CORS and WAF misconfigurations. What begins as a handful of low-risk findings rapidly escalates into the exposure of production credentials, cryptographic keys, and complete control over the platform.
This is a technical autopsy of how small cracks can align to create a catastrophic failure and a front-row seat to how attackers turn scattered weaknesses into total compromise!