BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//cfp.romhack.io//romhack-camp-2026//talk//N93XCA
BEGIN:VTIMEZONE
TZID:CET
BEGIN:STANDARD
DTSTART:20001029T040000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=10
TZNAME:CET
TZOFFSETFROM:+0200
TZOFFSETTO:+0100
END:STANDARD
BEGIN:DAYLIGHT
DTSTART:20000326T030000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=3
TZNAME:CEST
TZOFFSETFROM:+0100
TZOFFSETTO:+0200
END:DAYLIGHT
END:VTIMEZONE
BEGIN:VEVENT
UID:pretalx-romhack-camp-2026-N93XCA@cfp.romhack.io
DTSTART;TZID=CET:20261004T110000
DTEND;TZID=CET:20261004T114000
DESCRIPTION:This talk presents a real-world penetration test of a global pl
 atform with over 30 million users\, where a series of seemingly isolated v
 ulnerabilities were transformed into a complete attack chain that resulted
  in full system compromise.\n\nAttendees will follow the attacker's path a
 s trust boundaries are systematically dismantled through exposed secrets i
 n public JavaScript\, session abuse\, cross-application trust violations\,
  and critical CORS and WAF misconfigurations. What begins as a handful of 
 low-risk findings rapidly escalates into the exposure of production creden
 tials\, cryptographic keys\, and complete control over the platform.\n\nTh
 is is a technical autopsy of how small cracks can align to create a catast
 rophic failure and a front-row seat to how attackers turn scattered weakne
 sses into total compromise!
DTSTAMP:20260921T191642Z
LOCATION:STAGE 1 (Section 9)
SUMMARY:Chain Reaction - From Isolated Vulnerabilities to Full System Compr
 omise - Rana
URL:https://cfp.romhack.io/romhack-camp-2026/talk/N93XCA/
END:VEVENT
END:VCALENDAR