Researcher

Ignacio Navarro

Bio

Ignacio Navarro is an ethical hacker and application security professional with around 6 years in the cybersecurity game. His interests include code analysis, web application security, and cloud security. He has spoken at multiple conferences, including DEF CON, Troopers, and NorthSec.

Index

Research — 3 entries

August 8, 2026 Talk Offensive Security AppSec Village — DEF CON 2026 Every ride you take - Hacking a City's Public Transportation

Let's talk about some critical infrastructure that millions of people use every day: Public transportation. In this talk, I'll present some findings that I discovered in the public transportation ecosystem of one of the largest cities in Argentina, impacting more than 1.5 million people daily. Reading code, chaining vulnerabilities, weak access controls, and flawed internal designs, I got full access to core mobility systems, from buses to taxis, including DVRs, transport cards, user data, real-time tracking and administrative panels. We'll walk through the technical exploitation path, the real-world impact and the lessons learned.

Presented at AppSec Village — DEF CON 2026

View official session
August 5, 2026 Talk Offensive Security BSides Las Vegas 2026 Every ride you take - Hacking a City's Public Transportation

Let's talk about some critical infrastructure that millions of people use every day: Public transportation. In this talk, I'll present some findings that I discovered in the public transportation ecosystem of one of the largest cities in Argentina, impacting more than 1.5 million people daily. Reading code, chaining vulnerabilities, weak access controls, and flawed internal designs, I got full access to core mobility systems, from buses to taxis, including DVRs, transport cards, user data, real-time tracking and administrative panels. We'll walk through the technical exploitation path, the real-world impact and the lessons learned.

Presented at BSides Las Vegas 2026

View official session
August 4, 2026 Talk Offensive Security BSides Las Vegas 2026 Every ride you take - Hacking a City's Public Transportation (PART 2) - TOKEN: 13

Let's talk about some critical infrastructure that millions of people use every day: Public transportation. In this talk, I'll present some findings that I discovered in the public transportation ecosystem of one of the largest cities in Argentina, impacting more than 1.5 million people daily. Reading code, chaining vulnerabilities, weak access controls, and flawed internal designs, I got full access to core mobility systems, from buses to taxis, including DVRs, transport cards, user data, real-time tracking and administrative panels. We'll walk through the technical exploitation path, the real-world impact and the lessons learned.

Presented at BSides Las Vegas 2026

View official session