Attacks on the Curl-P Hash Function Leading to Signature Forgeries in the IOTA Signature Scheme
Análisis de vulnerabilidades en la función hash Curl-P de IOTA, revelando debilidades criptográficas que permiten falsificar firmas digitales en esta criptomoneda de alto perfil para el Internet de las Cosas.
Enhancing Cybersecurity Through Differentiated Access to Domain Name Registration Data
Explore new technology bridging privacy and access gaps in domain name registration data, enhancing cybersecurity through differentiated access and automated systems.
From Bot to Robot - How Abilities and Law Change with Physicality
Explore the evolving landscape of bots and robots, their impact on society, and the legal implications as they transition from digital to physical realms.
The Unbearable Lightness of BMC's
Explore vulnerabilities in data center Baseboard Management Controllers (BMCs), uncovering potential security risks and their implications for critical infrastructure.
Blockchain Autopsies - Analyzing Ethereum Smart Contract Deaths
Explore Ethereum smart contract vulnerabilities, reverse engineering techniques, and new tools for analyzing blockchain attacks through real-world examples and practical demonstrations.
There Will Be Glitches - Extracting and Analyzing Automotive Firmware Efficiently
Explore automotive firmware extraction and analysis techniques, focusing on fault injection and emulation for uncovering vulnerabilities in vehicle security systems.
Compression Oracle Attacks on VPN Networks
Explore compression oracle attacks on VPN networks, including browser requests and ESP compression. Learn detection methods, setup requirements, and potential future threats.
No Royal Road - Notes on Dangerous Game
Explores attribution fatigue in cybersecurity, examining nation-state hacking, stolen toolchains, and the evolution of cyber threats beyond espionage into active operations.
Remotely Attacking System Firmware
Explore remote attack vectors targeting system firmware, including networking and updates. Learn about exploiting UEFI vulnerabilities for installing persistent implants at scale.
Holding on for Tonight - Addiction in InfoSec
Explore the connection between stress, addiction, and relapse in InfoSec, with personal insights on alcohol use disorder and tips for fostering inclusive, supportive work environments.
Great Algorithms Do Not Always Make Great Products
Explore how to create engaging digital security solutions that generate real business outcomes and reduce enterprise risk, beyond just focusing on algorithms.
Finding Xori - Malware Analysis Triage with Automated Disassembly
Explore automated malware analysis using Xori, an open-source disassembler. Learn to identify suspicious functionality and contribute to this valuable cybersecurity tool.
How I Learned to Stop Worrying and Love the SBOM
Explore the potential of Software Bill of Materials (SBOM) to revolutionize information security, addressing industry resistance and highlighting its benefits for transparency and enterprise value.
Exploring How Memory-Mapped Files Hide From AV and Execute Malicious Code
Explore techniques for using memory-mapped files to conceal malicious payloads and execute code, evading antivirus detection.
Reversing a Japanese Wireless SD Card - From Zero to Code Execution
Discover how to reverse engineer a wireless SD card's firmware using open-source tools, uncovering its architecture and operating system to achieve code execution.
Edge Side Include Injection - Abusing Caching Servers into SSRF and Transparent Session Hijacking
Explore Edge Side Include injection, a web attack vector exploiting caching servers. Learn how this legacy technology can lead to SSRF and session hijacking vulnerabilities in modern web infrastructure.
Measuring the Speed of the Red Queen's Race - Adaption and Evasion in Malware
Explore the dynamic evolution of malware and security measures using machine learning to quantify adaptation rates in the ongoing cybersecurity arms race.
Miasm - Reverse Engineering Framework
Explore Miasm's reverse engineering capabilities, from basic framework to symbolic emulation and malware analysis tools. Learn disassembly, code emulation, and advanced techniques for tackling complex software.
Those Don't Matter! Effective Prioritization Through Exploit Prediction
Discover a machine learning classifier for data-driven vulnerability prioritization, enhancing risk management strategies and improving decision-making in cybersecurity.
iOS Jailbreak Internals - Userland Read-Only Memory Can Be Dangerous
Explora las vulnerabilidades en la memoria de solo lectura de iOS, analizando ataques DMA y explotando fallas en IOSurfaceAccelerator para lograr ejecución de código arbitrario y jailbreak.
A Hacker's Guide to Career Progression
Explore hacking career progression strategies, from risk-taking to problem-solving, mentorship, and giving back. Learn to navigate your journey based on technical preferences and salary aspirations.