Denial of Service with a Fistful of Packets - Exploiting Algorithmic Complexity Vulnerabilities
Explore algorithmic complexity vulnerabilities in web servers, their impacts, and mitigation strategies. Learn how small inputs can cause significant disruptions and how to protect against these attacks.
CQTools - The New Ultimate Hacking Toolkit
Explore top 39 hacking tools in CQTools, including 5 new ones for privilege elevation and network attacks. Learn techniques for hash extraction, impersonation, and decryption.
Open Sesame - Picking Locks with Cortana
Uncover the "Open Sesame" vulnerability in Cortana, allowing attackers to bypass Windows lock screens, execute code, and potentially gain elevated privileges on locked machines.
Attacking and Defending Blockchains - From Horror Stories to Secure Wallets
Explore blockchain security failures and risk mitigation strategies. Learn about wallet types, exchange vulnerabilities, and notable blockchain bugs to enhance your understanding of cryptocurrency protection.
Under the SEA - A Look at the Syrian Electronic Army's Mobile Tooling
Explore the Syrian Electronic Army's mobile surveillance tools, focusing on SilverHawk, its capabilities, and deployment methods in this cybersecurity analysis.
DeepPhish - Simulating Malicious AI
Explore AI-driven phishing simulations, encryption misuse, and advanced cybercrime techniques. Learn to detect and counter evolving digital threats in this cutting-edge security presentation.
Practical Web Cache Poisoning - Redefining 'Unexploitable'
Explore web cache poisoning techniques to compromise websites by exploiting caches and content delivery networks, turning them into exploit delivery systems targeting unsuspecting visitors.
Intercepting iCloud Keychain
Discover critical cryptographic flaws in iCloud Keychain's end-to-end encryption, potentially allowing attackers to access plaintext secrets through man-in-the-middle attacks on iCloud communications.
Adventures in Attacking Wind Farm Control Networks
Explore vulnerabilities in wind farm control networks and potential attack scenarios, with insights on securing these critical renewable energy infrastructures.
A Short Course in Cyber Warfare
Explore cyber warfare's complexities, including policy, strategy, and tactics. Gain insights into organizational structures and factors contributing to success in this evolving domain of conflict.
Attack on Titan M, Reloaded - Vulnerability Research on a Modern Security Chip
Explore vulnerability research on Google's Titan M security chip, including fuzzing techniques, impact analysis, and mitigation strategies for modern device protection.
Attacks From a New Front Door in 4G & 5G Mobile Networks
Unveils critical API vulnerabilities in 4G/5G networks, exposing risks for AI, MEC, and IoT applications. Explores attack vectors, security misconfigurations, and potential exploits in commercial providers' systems.
AAD Joined Machines - The New Lateral Movement
Explore new lateral movement techniques in Azure AD joined machines, including Pass-The-Certificate attacks and hunting solutions for enhanced network security.
Better Privacy Through Offense - How to Build a Privacy Red Team
Learn to build and operate a privacy red team, exploring its unique challenges and benefits for enhancing organizational privacy defenses through offensive techniques and real-world examples.
Whip the Whisperer - Simulating Side Channel Leakage
Explore pre-silicon power simulations to detect cryptographic side channel leakage in hardware designs, with case studies on identifying and mitigating vulnerabilities in software and hardware implementations.
Bug Bounty Evolution - Not Your Grandson's Bug Bounty
Explore the evolution of bug bounty programs, their impact on cybersecurity, and future directions. Gain insights into challenges, best practices, and alternative solutions for ethical hackers and organizations.
Taking Kernel Hardening to the Next Level
Explore advanced kernel hardening techniques, focusing on CFI and UAF defense. Learn about new approaches to enhance OS security against evolving exploitation methods.
Bypass CFG in Chrome
Explore advanced techniques for bypassing Control Flow Guard (CFG) in Chrome, including analysis of previous methods and examination of current vulnerabilities.
ChaosDB - How We Hacked Databases of Thousands of Azure Customers
Uncover critical Azure Cosmos DB vulnerability allowing unauthorized admin access to thousands of customer databases. Learn about the discovery, exploitation, and implications of this unprecedented cloud security flaw.
TeamTNT - Explosive Cryptomining
Explore TeamTNT's cryptojacking tactics targeting Linux servers, including their attack methods, credential theft, and evolution from Docker instances to Windows systems.
Recertifying Active Directory Certificate Services
Explore AD CS vulnerabilities, attack vectors, and defense strategies for securing Microsoft's PKI implementation. Learn escalation scenarios, auditing techniques, and incident response.