I Am Whoever I Say I Am - Infiltrating Identity Providers Using a 0-Click Exploit

Explore a critical security presentation that delves into infiltrating Identity and Access Management (IAM) solutions through a zero-click exploit. Learn about the foundational use-cases for IAM solutions and examine past in-the-wild attacks, understanding their impact. Follow the presenter's audit approach, including challenges faced and overcome. Discover how multiple vulnerabilities were chained to achieve unauthenticated remote code execution as root on a popular IAM solution used by Fortune 500 companies and government organizations. Gain valuable insights into cybersecurity threats and vulnerabilities in identity provider systems.

I Am Whoever I Say I Am: Infiltrating Identity Providers Using a 0Click Exploit