Profile picture of speaker named Soroush Dalili

Soroush Dalili

Web Appsec Expert | Pentester | Code Review | Trainer | Researcher

Soroush is a distinguished web application security expert with over 20 years of experience specialising in web application security testing, vulnerability discovery, security source code review, and penetration testing. He has contributed numerous security advisories to industry giants such as Microsoft, Mozilla, Adobe, Yahoo, and Facebook. Soroush's expertise has been showcased through speaking engagements at security conferences and events, including AppSec EU, SteelCon, BSides Manchester, and HackPra.
Soroush has also developed a widely-adopted testing methodology for financially-oriented web applications, which is utilized by security testers across the globe. Soroush may also be recognized for his discovery of the IIS semicolon vulnerability and the IIS Short File Name Disclosure vulnerability. In recent years, he has served as a judge for the Top 10 Web Hacking Techniques alongside esteemed industry experts such as James Kettle.

Talks and workshops