BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//cfp.troopers.de//tr26-cfp//speaker//88GEUK
BEGIN:VTIMEZONE
TZID:CET
BEGIN:STANDARD
DTSTART:20001029T040000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=10
TZNAME:CET
TZOFFSETFROM:+0200
TZOFFSETTO:+0100
END:STANDARD
BEGIN:DAYLIGHT
DTSTART:20000326T030000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=3
TZNAME:CEST
TZOFFSETFROM:+0100
TZOFFSETTO:+0200
END:DAYLIGHT
END:VTIMEZONE
BEGIN:VEVENT
UID:pretalx-tr26-cfp-UR9JPA@cfp.troopers.de
DTSTART;TZID=CET:20260625T110000
DTEND;TZID=CET:20260625T120000
DESCRIPTION:We created "Living Off The Pipeline" (LOLBAS for CI/CD) and a 0
 -day vuln scanner\, then we saw Threat Actors on BreachForums were paying 
 attention. Enter the "Metasploit for CI/CD." In this live kill-chain\, we 
 exploit "pwn requests" to pivot from a public GitHub repo to private repos
 . We show how anonymous users gain "insider" privileges to exfiltrate secr
 ets\, poison releases\, and escalate to Cloud Admin.
DTSTAMP:20260510T025859Z
LOCATION:Track 3
SUMMARY:Living Off The Pipeline: Defensive Research\, Weaponized - Françoi
 s Proulx
URL:https://cfp.troopers.de/tr26-cfp/talk/UR9JPA/
END:VEVENT
END:VCALENDAR