Name: MCP LFI in 60 minutes (or your money back)
Start: 2026-03-18T17:30:00-06:00
End: 2026-03-18T20:30:00-06:00

5:30 Gathering, welcome, food, networking
6:00 (-ish) Announcements and Presentation
6;05(-ish) Quick Sales Talk
6:10(-ish) Talk below (non sales, pure tech)

The Model Context Protocol (MCP) is an emerging technology that promises tons of delicious attack surface. In this talk, you’ll get a purple team primer on MCP, a demonstration of why you should get a handle on anything being built at your org, and finally some effective defense in depth strategies (that you’re hopefully already doing) that will save your bacon.

7:15 Talk and networking until 8:30

Frank Victory

OWASP Denver Chapter

OWASP Foundation 

Technology

White Hat Hacking

Web Security

Network Security

OWASP

Information Security

Application Security

Software Security

Computer Security

Cloud Security

Penetration Testing

Computer Forensics

Web Application Security

Kurt is a Security Researcher focused on the intersection of secure code review, open-source vulnerability discovery, and security process automation. I specialize in identifying complex injection and deserialization flaws in widely-used frameworks.
**Notable Research & Disclosures:**

* **Apache PDFBox (CVE-2019-0228):** Discovered an XXE vulnerability in the XFDF parser.
* **Jenkins (CVE-2019-10327):** Identified an XXE injection in the Maven Pipeline plugin.
* **YamlDotNet (CVE-2018-1000210):** Uncovered a critical IDOR/deserialization flaw.

In addition to research, I contribute to the open-source security community through projects like **ysoserial.net**, building tools that help practitioners test for and mitigate modern exploit vectors.

Kurt Boberg

MCP LFI in 60 minutes (or your money back)

Share

OWASP Denver Chapter

MCP LFI in 60 minutes (or your money back)

OWASP Denver Chapter

Details

You may also like