Final 30 minutes
Main Attack: File Viewer → Forced Authentication
This is the scenario that June will defend. Keep the attack explanation story-based: what happened, what changed, what evidence exists.
June defense handoff
BriefReconInput AbuseCallbackExposureEvidenceHandoff
OFFENSIVE VIEW
attacker sequence
VICTIM / SYSTEM VIEW
app, server, and network effects
DEFENDER VIEW
what the defender can see
Presenter framing:
“This is not a walkthrough. We are not teaching exploit syntax. We use a realistic pattern to ask: what did the system do, what would telemetry show, and what controls would have broken the chain?”
“This is not a walkthrough. We are not teaching exploit syntax. We use a realistic pattern to ask: what did the system do, what would telemetry show, and what controls would have broken the chain?”
Audience prompt:
“At which moment did this become a security event: the weird file input, the outbound authentication attempt, the captured challenge, or the later login attempt?”
“At which moment did this become a security event: the weird file input, the outbound authentication attempt, the captured challenge, or the later login attempt?”