Internet-Scale File Analysis
Explore TOTEM and DRAKVUF systems for large-scale malware analysis, addressing challenges in file diversity, volume, and dynamic analysis through cloud-based orchestration and hardware virtualization.
Taking Event Correlation With You
Explore event correlation in cybersecurity using Giles, a compiler creating SQL-based engines. Learn to detect patterns, link records, and enhance security analysis across various scenarios.
Battle of the SKM and IUM - How Windows 10 Rewrites OS Architecture
Explore Windows 10's revolutionary OS architecture, featuring Virtual Secure Machines, Secure Kernel Mode, and Isolated User Mode. Learn how these changes enhance security and impact system design.
SSL Validation Checking vs. Going to Fail
Explore SSL certificate validation vulnerabilities in mobile apps using SVF tool. Learn about testing methods, real-world results, and implications for app security.
Lessons Learned from Eight Years of Breaking Hypervisors
Explore vulnerabilities in popular hypervisors, examining security features, attack surfaces, and design flaws. Gain insights on improving hypervisor security through real-world examples and expert recommendations.
Analyzing UEFI BIOSes from Attacker & Defender Viewpoints
Explore UEFI BIOS analysis from attacker and defender perspectives, covering key concepts like UEFI boot phases, firmware storage, and security implications for effective reverse engineering of modern PC firmware.
Blended Web and Database Attacks on Real-Time, In-Memory Platforms
Explore innovative attack vectors on real-time, in-memory platforms, blending web and database vulnerabilities. Learn about new SQL injection techniques, server-side JavaScript exploits, and R-based attacks in SAP HANA.
Firmware.RE - Firmware Unpacking, Analysis and Vulnerability-Discovery as a Service
Large-scale analysis of firmware images reveals vulnerabilities across embedded systems, highlighting security challenges and the need for improved tools and techniques in firmware analysis.
DTM Components - Shadow Keys to the ICS Kingdom
Explore vulnerabilities in industrial control system components, focusing on DTM technology used in critical industries. Learn about security flaws and their implications for field devices.
Hack Your ATM with Friend's Raspberry Pi
Explore ATM vulnerabilities and hacking techniques using Raspberry Pi, focusing on device interfaces and communication protocols. Learn about potential security risks and countermeasures in ATM systems.
Network Attached Shell - N.A.S.ty Systems that Store Network Accessible Shells
Explore critical vulnerabilities in network storage devices, their impact on data security, and potential for network exploitation. Learn about attack techniques and implications for IT professionals and consumers.
PDF Attack - A Journey from the Exploit Kit to the Shellcode
Explore PDF-based attacks, from exploit kits to shellcode analysis. Learn to extract and analyze obfuscated JavaScript, modify malicious PDFs, and understand cybercriminal techniques using peepdf tool.
A Practical Attack Against VDI Solutions
Demonstration of a proof-of-concept attack exploiting screen scraping to bypass VDI security measures, highlighting vulnerabilities in secure BYOD solutions.
Charge Your Device with the Latest Malware
Exposición de vulnerabilidades USB en sistemas Android personalizados, con demostración de ataque y escenario práctico, revelando implicaciones y logrando acceso root.
Hacking the Wireless World with Software Defined Radio - 2.0
Explore RF spectrum analysis, reverse engineering wireless systems, and hacking techniques using software-defined radio. Learn to decode satellite communications, track aircraft, and monitor ACARS.
Quantified Self - A Path to Self-Enlightenment or Just a Security Nightmare
Explore the security risks and privacy concerns of Quantified Self technology, including data leaks, tracking vulnerabilities, and best practices for protecting personal information.
The Power of Pair - One Template that Reveals 100+ UAF IE Vulnerabilities
Discover a unique fuzzing strategy that revealed over 100 IE use-after-free vulnerabilities. Learn about the vulnerability hunting system and techniques used to find critical browser security flaws.
Quantum Key Distribution and the Future of Encryption
Explore quantum key distribution and its role in future encryption, covering quantum mechanics basics, algorithms, and real-world experiments to ensure data security in the quantum computing era.
How to Find Bugs in USB Device Drivers
Explore USB device driver vulnerabilities using vUSBf framework. Learn about fuzzing techniques, bug detection, and potential security risks in USB implementations across various operating systems.
Secure Digital Communications for Our Modern Dystopia
Secure communication system for hostile environments, leveraging NASA's Disruption-Tolerant Networking for activists, refugees, and trolls. Embraces high-throughput physical data transfer methods.
Man in the Binder - He Who Controls IPC, Controls the Droid
Explore Android's Binder IPC system, its security implications, and potential vulnerabilities through a POC rootkit demonstration and in-depth analysis of low-level Binder operations.