CnCHunter - An MITM-Approach to Identify Live CnC Servers
Systematic tool for efficiently discovering live CnC servers using MITM approach, overcoming challenges of changing locations, proprietary protocols, and encryption in botnet communication.
Disinformation at Scale - Using GPT-3 Maliciously for Information Operations
Explores the potential misuse of GPT-3 for large-scale disinformation campaigns, examining its capabilities to generate convincing fake news and the implications for society and information integrity.
Crashing Your Way to Medium-IL - Exploiting the PDB Parser for Privilege Escalation
Discover vulnerabilities in Windows PDB parser, learn exploitation techniques for privilege escalation, and explore the intricacies of memory corruption in DbgHelp.dll.
DBREACH - Database Reconnaissance and Exfiltration via Adaptive Compression Heuristics
Explore database vulnerabilities through compression side-channel attacks, learning techniques to extract encrypted content and strategies for prevention and patching.
Greybox Program Synthesis - A New Approach to Attack Dataflow Obfuscation
Explore cutting-edge program synthesis techniques for deobfuscation, focusing on intellectual property protection in mobile and embedded systems. Learn about latest advances and practical applications.
Next-Gen DFIR - Mass Exploits & Supplier Compromise
Explore real-world cases of large-scale cyber incidents, focusing on service and software provider compromises. Learn to adapt DFIR processes for global threats and improve incident visibility.
Breaking Network Segregation Using Esoteric Command & Control Channels
Explore novel techniques for lateral movement in segregated networks using unconventional command and control channels, enhancing penetration testing and attack simulation capabilities.
Demystify AI Security Products With a Universal Pluggable XAI Translator
Explore a universal XAI translator to evaluate AI-powered security products, bridging research and practice for informed decision-making in the rapidly evolving field of AI security.
HPE iLO5 Firmware Security - Go Home Cryptoprocessor, You're Drunk!
Explore vulnerabilities in HPE Gen10 servers' iLO5 management technology, focusing on the "silicon root of trust" and its implications for server security.
With Friends Like eBPF, Who Needs Enemies?
Explore eBPF's evolution from network monitoring to a powerful Linux kernel observability tool, its security implications, and potential misuse by attackers.
PCIe Device Attacks - Beyond DMA - Exploiting PCIe Switches, Messages and Errors
Explore advanced PCIe security threats targeting switches and Translation Layer Packets. Learn about novel attack vectors beyond traditional DMA exploits in high-bandwidth peripheral connections.
Over the Air Baseband Exploit - Gaining Remote Code Execution on 5G Smartphones
Explore 5G network security, baseband vulnerabilities, and remote code execution on smartphones through hands-on research, methodology, and live demonstrations.
The Problems and Promise of WebAssembly
Explore WebAssembly's features, vulnerabilities, and future security concerns in this comprehensive overview, with practical examples and insights.
Breaking Parser Logic - Take Your Path Normalization Off and Pop 0days Out
Explore path normalization vulnerabilities, their impact on web security, and techniques to exploit them for bypassing access controls and achieving remote code execution.
Snooping on Cellular Gateways and Their Critical Role in ICS
Explore vulnerabilities in cellular devices used for IoT and ICS connectivity, focusing on Sierra Wireless and other manufacturers' products. Learn about the security implications of always-on, available-anywhere connectivity.
Behind the Speculative Curtain - The True Story of Fighting Meltdown and Spectre
Insider account of the urgent response to Meltdown and Spectre vulnerabilities, revealing the challenges and decisions faced by cybersecurity experts during a critical disclosure situation.
Stealth Mango and the Prevalence of Mobile Surveillanceware
Unveiling nation-state mobile surveillance tools Stealth Mango and Tangelo, exploring their capabilities and impact on government and military targets across multiple countries.
Detecting Malicious Cloud Account Behavior - A Look at the New Native Platform Capabilities
Explore new native cloud platform capabilities for detecting suspicious account activity, including attack lifecycle, detection methods, and practical examples from major providers.
Fire & Ice - Making and Breaking macOS Firewalls
Explore macOS firewall creation and vulnerabilities, covering kernel-level socket filtering, user-mode communication, secure installation, and self-defense mechanisms. Learn about firewall bypasses and potential weaknesses.
Don't @ Me - Hunting Twitter Bots at Scale
Explore the Twitter bot economy and learn a three-step methodology to track down bots: dataset building, attribute identification, and classifier development for accurate large-scale detection.
A Brief History of Mitigation - The Path to EL1 in iOS 11
Explore the async_wake exploit for iOS 11.1.2, examining each step and the mitigations overcome. Gain insights into iOS security vulnerabilities and exploitation techniques.