Antti Rössi

A security-focused talk by a CTO from Helsinki discussing practical hacking techniques and defensive strategies in Laravel applications. The speaker demonstrates SQL injection attacks using SQLmap, object injection vulnerabilities through PHP stream wrappers and serialization, and privilege escalation risks when running Laravel scheduler as root. The talk emphasizes the importance of proper validation, keeping software updated, and understanding security as an ongoing process rather than a one-time task.