48 Dirty Little Secrets Cryptographers Don't Want You to Know
Explore 48 cryptographic attacks through hands-on challenges, covering block ciphers, public key algorithms, and real-world vulnerabilities. Gain practical insights into crypto exploitation across multiple programming languages.
Smart Nest Thermostat - A Smart Spy in Your Home
Explore security vulnerabilities in Nest thermostats, including hardware-level attacks and potential for remote exploitation. Learn about risks to privacy and home security posed by compromised smart home devices.
Protecting Data In-Use from Firmware and Physical Attacks
Explore firmware and physical attacks on data, including SMM bootkits and cold booting. Learn about mitigation tools like TXT and upcoming technologies such as SGX and EPID.
How Smartcard Payment Systems Fail
Explore vulnerabilities in smartcard payment systems, including protocol flaws, certification issues, and governance problems. Learn about real-world attacks and their implications for EMV adoption.
Probabilistic Spying on Encrypted Tunnels
Explore probabilistic algorithms for analyzing encrypted network tunnels, identifying application protocols, and extracting side channel information to determine content types and usage patterns.
I Know Your Filtering Policy Better than You Do
Discover techniques for bypassing email and web filtering security, including automated enumeration of services and policies, and creating undetectable client-side attacks to gain remote control of systems.
Pulling Back the Curtain on Airport Security - Can a Weapon Get Past TSA?
Explore airport security systems, their inner workings, and potential vulnerabilities. Learn about checkpoint configurations, threat detection technologies, and discovered weaknesses in modern security procedures.
Contemporary Automatic Program Analysis
Explore automatic program analysis techniques for vulnerability discovery, from historical context to cutting-edge methods, with practical examples and demos for effective security research.
The New Page of Injections Book - Memcached Injections
Explore memcached injection vulnerabilities across popular web platforms, learning attack techniques, potential impacts, and post-exploitation strategies for improved application security.
Call to Arms - A Tale of the Weaknesses of Current Client-Side XSS Filtering
Uncovers 17 flaws in Chrome's XSS Auditor, demonstrating bypasses and presenting a tool for generating attacks. Analyzes filter effectiveness against real-world vulnerabilities, proposing future improvements.
How to Leak a 100-Million-Node Social Graph in Just One Week
Exploración de vulnerabilidades en OAuth 2.0 para redes sociales, demostrando cómo la suplantación de aplicaciones puede llevar a la filtración masiva de datos de usuarios y gráficos sociales.
Epidemiology of Software Vulnerabilities - A Study of Attack Surface Spread
Explore the impact of third-party libraries on software vulnerabilities, analyzing their spread across products and discussing strategies to mitigate risks in application development.
Finding and Exploiting Access Control Vulnerabilities in Graphical User Interfaces
Explore GUI element misuse as a novel class of access control vulnerabilities. Learn to identify, classify, and exploit GEMs in Windows applications using the GEM Miner tool.
Building Safe Systems at Scale - Lessons from Six Months at Yahoo
Insights on building secure systems for large-scale internet companies, addressing challenges of surveillance, user privacy, and evolving security threats in the digital landscape.
Attacking Mobile Broadband Modems Like a Criminal Would
Exploring web-based attacks on mobile broadband modems, demonstrating how criminals can exploit vulnerabilities for profit, data theft, and persistent device control with minimal effort.
Racing Towards Practical Timing Attacks
Explore practical timing attacks in web applications, focusing on detection, exploitability, and defense. Learn to distinguish theoretical vulnerabilities from real threats using the 'time trial' tool.
Pivoting in Amazon Clouds
Explore cloud application vulnerabilities and exploitation techniques in Amazon Web Services, from initial access to gaining root account control. Learn about EC2, SQS, IAM, RDS, and more.
Runtime Analysis of Vulnerabilities and Generation of Exploits
Runtime analysis tool for detecting vulnerabilities and generating exploits. Leverages program execution to identify dataflows, usable for both offensive and defensive purposes. Includes live demonstrations and open-source release.
SVG - Exploiting Browsers without Image Parsing Bugs
Explore SVG's hidden potential for web exploitation, including JavaScript execution and external resource imports, challenging traditional browser security assumptions.
Bringing Software Defined Radio to the Penetration Testing Community
Explore wireless device security using Software Defined Radio. Learn to assess vulnerabilities in IoT, smartmeters, and wearables with an easy-to-use tool combining GNU Radio and scapy framework.
SATCOM Terminals - Hacking by Air, Sea, and Land
Exposé des vulnérabilités critiques dans les terminaux de communication par satellite, permettant des attaques à distance sur les systèmes maritimes, aériens et terrestres. Démonstration technique incluse.