Conference on Mazin Ahmed

Attacking GraphQL APIs (OWASP PNW 2024)

Wed, 16 Sep 2026 00:00:00 +0000

I spoke at OWASP AppSec Days Pacific Northwest 2024 in Vancouver about attacking GraphQL APIs.

The talk covered a range of GraphQL attacks and advanced attack vectors, along with the security considerations that are beyond the traditional checklists.

Slides #

PDF: Attacking GraphQL APIs - OWASP AppSec Days Pacific Northwest 2024.pdf
PowerPoint: Attacking GraphQL APIs - OWASP AppSec Days Pacific Northwest 2024.pptx

Speaker Preview #

The conference published a short speaker preview ahead of the talk.

Speaking at BlackHat MEA 2022

Mon, 05 Dec 2022 00:00:00 +0000

Riyadh, Saudi Arabia, recently hosted BlackHat MEA (Middle East & Africa), the largest security conference in the Middle East and Africa region.

BlackHat MEA featured various events, including an Executive Summit, Technical tracks, a Drone Hacking village, a Car Hacking village, a live Tesla hacking event, and a startup competition.

My Talk #

I had the opportunity to speak this year at BlackHat, where I presented my latest research, “Demystifying Practical DDoS Attacks”.

DoS Attacks are Dead: Demystifying Practical DoS Attacks

Sun, 04 Dec 2022 00:00:00 +0000

I recently spoke at BlackHat MEA 2022, the largest security conference in the Middle East and Africa region. My talk, titled “Demystifying Practical DoS Attacks”, focused on the increasing threat of DoS attacks and the need for improved defense solutions and for practical validation of current DDoS prevention solutions.

In my presentation, I shared my research on practical DoS attacks, including recent Application-Level DoS attacks and evasion techniques. I also discussed the discovery of unique DoS vectors in modern APIs and demonstrated how to simulate the most significant Layer 7 DDoS attack that Google Cloud experienced in August 2022.