Explore fingerprinting techniques for web application platforms through PNG implementation variations in this 18-minute Black Hat conference talk. Delve into the limitations of traditional fingerprinting methods and discover how analyzing PNG decoders/encoders can provide more reliable platform identification. Learn about a set of tests that differentiate between PNG libraries, enabling platform detection even when anti-fingerprinting measures are in place. Examine case studies involving various web applications, including Java-based systems, Amazon, Photobucket, and Python implementations. Gain insights into the potential of image-based fingerprinting for enhancing web application security audits and forensic investigations.