aol.pm

API-Induced SSRF: How Apple Pay Scattered Vulnerabilities Across the Web

DEF CON 27 · 2019

Presenter: Joshua Maddux

Attributed source ↗ · Plaintext record

Independent InfoconDB index. Title: source supplied. Credit: research dataset; independent index title match. Delivery: Not independently verified.

Source date value: 2019-08-09. This is retained as source metadata; recording dates or placeholder timestamps do not establish a session’s actual date.

Rights: Metadata and source links only; abstracts, biographies, transcripts and media not republished

Research dataset: Lukas Walter, Clemens Sauerwein, Daniel Woods, InfoSec.pptx, https://doi.org/10.5281/zenodo.15989593, CC BY 4.0 https://creativecommons.org/licenses/by/4.0/. Changes: metadata extraction, exact-match reconciliation and uncertainty flags. No endorsement implied.

Inspect structured metadata and provenance
{
  "id": "defcon-index-27-e87dcba62bfa1f80",
  "title": "API-Induced SSRF: How Apple Pay Scattered Vulnerabilities Across the Web",
  "presenters": [
    "Joshua Maddux"
  ],
  "event": "DEF CON 27",
  "year": "2019",
  "source_url": "https://infocondb.org/con/def-con/def-con-27/api-induced-ssrf-how-apple-pay-scattered-vulnerabilities-across-the-web",
  "source_kind": "Independent InfoconDB index",
  "source_file": "infocondb-def-con-27.html",
  "rights": "Metadata and source links only; abstracts, biographies, transcripts and media not republished",
  "delivery_status": "Not independently verified",
  "title_status": "source supplied",
  "presenter_status": "research dataset; independent index title match",
  "media": [

  ],
  "provenance": [
    {
      "file": "infocondb-def-con-27.html",
      "url": "https://infocondb.org/con/def-con/def-con-27/",
      "source_kind": "secondary independent index",
      "sha256": "d7d41925369eee87b799632106b2ac7efbcaed6ab17ae9895221c48c193b7920",
      "checked": "2026-10-16T03:48:27Z"
    },
    {
      "raw_title": "API-Induced SSRF: How Apple Pay Scattered Vulnerabilities Across the Web",
      "raw_agenda": "09.08.2019",
      "date_conflict": false,
      "url": "https://doi.org/10.5281/zenodo.15989593",
      "file": "speaker_infosec.csv",
      "rows": [
        2317
      ],
      "sha256": "e47480bc376a20292a4f6fd990be7b687f43ff0bfb861267c5533cebf3114d46",
      "attribution": "Lukas Walter, Clemens Sauerwein, Daniel Woods; InfoSec.pptx dataset; CC-BY-4.0; extracted metadata, omitted abstracts and automated classifications",
      "license": "https://creativecommons.org/licenses/by/4.0/"
    }
  ],
  "date": "2019-08-09",
  "research_credit_rows": [
    {
      "presenter": "Joshua Maddux",
      "role": "Security Researcher / Software Engineer",
      "affiliation": "PKC Security",
      "row": 2317
    }
  ]
}

Coverage and source gaps

Provided as is, for information only, with no warranty and no liability. Not legal or professional advice. Security and radio material is for authorized, lawful use only. Full disclaimer.

Visits are logged on our own server: IP address, browser and device details, and pages viewed. We use them to understand traffic and spot attacks, and never share or sell them.