Decentralized Malware on the Blockchain
Explore the potential threat of embedding malware in blockchain transactions, its implications for cybersecurity, and possible solutions to mitigate risks in decentralized systems.
Client-Side Protection Against DOM-Based XSS Done Right
Comprehensive analysis of Chrome's XSS Auditor, revealing vulnerabilities and proposing an improved filter design using client-side taint tracking for robust DOM-XSS protection.
AndroBugs Framework - An Android Application Security Vulnerability Scanner
Explore AndroBugs Framework, a free Android vulnerability analysis system. Learn to identify and mitigate security risks in Android apps before release, enhancing app safety and user protection.
A Peek Under the Blue Coat
Detailed analysis of Blue Coat ProxySG systems, exploring OS mechanisms, file system internals, and security features. Insights for IT professionals managing web traffic proxying and filtering.
Silently Breaking ASLR in the Cloud
Exploit memory deduplication to defeat ASLR in cloud environments, leaking randomized base addresses of libraries and executables in neighboring VMs using a side-channel attack.
Even The LastPass Will Be Stolen, Deal With It!
Uncover vulnerabilities in LastPass password manager, including methods to steal master passwords, bypass 2FA, and access encrypted vaults, highlighting the importance of robust security measures.
Automating Linux Malware Analysis Using Limon Sandbox
Explore automated Linux malware analysis with Limon sandbox. Learn to collect, analyze, and report runtime indicators using static, dynamic, and memory analysis techniques for comprehensive threat assessment.
Attacking the XNU Kernel in El Capitan
Explore new techniques to bypass XNU kernel exploit mitigations in El Capitan, including KASLR and SMEP, and learn how to overcome System Integrity Protection through a real kernel exploit demonstration.
What You Need to Know About the Changing Regulatory Landscape in Information Security
Explore the evolving regulatory landscape in information security with experts discussing challenges, communication gaps, and strategies for navigating policy changes in Europe and beyond.
Cybersecurity for Oil and Gas Industries - How Hackers Can Manipulate Oil Stocks
Explore critical cybersecurity vulnerabilities in oil and gas industries, focusing on SAP and Oracle systems. Learn about potential attacks, their impacts, and strategies for protecting vital infrastructure and operations.
Breaking Access Controls with Blekey
Explore RFID access control vulnerabilities and learn to exploit them using open-source hardware. Discover techniques for circumventing security, logging access, and cloning cards to understand and mitigate risks.
Bypassing Self-Encrypting Drives in Enterprise Environments
Explore SED vulnerabilities, their impact on data protection, and strategies for safeguarding against new threats in enterprise environments.
What Got Us Here Won't Get Us There
Explore InfoSec challenges, industry distractions, and harmful practices. Learn to tackle real problems, avoid security antipatterns, and embrace simplicity for effective cybersecurity strategies.
PWNIE Awards
Celebrating excellence in information security with humor and recognition for groundbreaking achievements and epic fails in the cybersecurity industry.
Information Access and Information Sharing - Where We Are and Where We Are Going
Exploring DHS's vision for rapid, widespread cybersecurity information sharing across sectors. Discusses challenges and the goal of making threat indicators a public good for enhanced network defense.
Untangling the DOM for More Easy-Juicy Bugs
Explore dynamic JavaScript analysis with Hookish!, an open-source Chrome extension for penetration testing. Learn to uncover DOM-based vulnerabilities and enhance web app security assessments.
Breaking Payloads With Runtime Code Stripping and Image Freezing
Innovative defensive strategy to break attack payloads by removing unused code and APIs from application processes, enhancing security without runtime overhead or file modifications.
Review and Exploit Neglected Attack Surfaces in iOS 8
Explores overlooked iOS 8 vulnerabilities through fuzzing and code auditing, revealing system daemon crashes and memory corruption errors triggerable via XPC, plus an iOS kernel 0day.
BGP Stream
Explore BGP Stream: real-time detection of potentially malicious BGP/ASN changes for enhanced network security and traffic flow monitoring.
The Kali Linux Dojo Workshop - Kali USB Setups With Persistent Stores And LUKS Nuke Support
Learn to set up Kali Linux on USB with persistent storage and LUKS Nuke support. Explore live boot options, create persistence files, and handle emergency situations for secure, portable penetration testing.
The Kali Linux Dojo Workshop - Rolling Your Own - Generating Custom Kali Linux ISOs
Learn to generate custom Kali Linux 2.0 ISOs, tailoring the powerful penetration testing platform to your specific needs and preferences.