Windows Phone 7 Internals and Exploitability
Comprehensive analysis of Windows Phone 7 security, revealing hidden internals through reverse engineering. Explores potential vulnerabilities and exploitation techniques in the OS and vendor customizations.
Hardware Backdooring is Practical
Explores hardware backdooring through Rakshasa malware, demonstrating permanent BIOS infection, NX bit disabling, and security lowering across various motherboards using open-source components like Coreboot.
SSRF vs Business Critical Applications
Explore SSRF vulnerabilities in business-critical applications, focusing on SAP systems. Learn about XXE Tunneling and its potential to bypass security restrictions, with practical examples and attack scenarios.
Recent Java Exploitation Trends and Malware
Explore recent Java vulnerabilities, exploitation techniques, and malware trends. Learn about sandbox evasion, multi-platform attacks, and challenges in analyzing obfuscated Java exploits.
CuteCats.exe and the Arab Spring
Analysis of malware targeting activists during Middle Eastern uprisings, exploring distribution methods and impact on digital dissent and online communities.
Smashing the Future for Fun and Profit
Visionary security experts discuss emerging threats, technological shifts, and societal impacts on cybersecurity over the next 15 years, offering insights into future challenges and opportunities in the field.
Probing Mobile Operator Networks
Explore techniques for probing cellular networks, uncovering diverse connected devices, and discussing security implications of findings from network investigations.
Hookin Ain't Easy - BeEF Injection with MITM
Explore browser exploitation techniques using MITM attacks and the BeEF Framework. Learn to hook browsers without social engineering or XSS, and maintain connections for advanced penetration testing.
Cellular Exploitation on a Global Scale - The Rise and Fall of the Control Protocol
Explore hidden cellular device controls, their vulnerabilities, and potential for global exploitation. Learn reverse engineering techniques, protocol analysis, and proof-of-concept exploits for major platforms and networks.
Mission mPOSsible
Explore vulnerabilities in mobile payment systems, including code execution through various input vectors. Live demonstrations showcase attack methods, emphasizing security weaknesses in current mPOS solutions.
The State of Incident Response
Explore economic and psychological factors shaping incident response in cybersecurity, examining trends, challenges, and potential solutions for protecting networks against sophisticated attacks.
BadUSB - On Accessories that Turn Evil
Explores USB security vulnerabilities, demonstrating malware in controller chips, device spoofing, and system compromises. Discusses potential defenses against USB-based attacks.
Breaking the Security of Physical Devices
Explore vulnerabilities in everyday devices like cars and home alarms. Learn about eavesdropping, replay attacks, and code analysis techniques to understand and mitigate security risks in physical systems.
Oracle Data Redaction is Broken
Explore vulnerabilities in Oracle's data redaction service, including bypass techniques and privilege escalation attacks, with insights on protection and compliance implications.
Cybersecurity as Realpolitik
Explore the intersection of cybersecurity and political realism, examining power dynamics and policy implications in the digital realm.
Beyond ‘Check The Box’ - Powering Intrusion Investigations
Explore advanced intrusion investigation techniques, focusing on DHCP logging, Kerberos tickets, and DNS resolutions to enhance cybersecurity capabilities and identify compromise indicators.
Diving Into IE 10’s Enhanced Protected Mode Sandbox
Explore IE 10's Enhanced Protected Mode Sandbox, its security features, and potential vulnerabilities in this in-depth technical analysis.
Exploiting DNS Servers Changes
Explore techniques for exploiting DNS server vulnerabilities and recent changes, focusing on offensive security strategies and potential attack vectors.
Privacy-by-Design for the Security Practitioner
Learn essential privacy-by-design principles and techniques for security practitioners, enhancing your ability to protect user data and implement robust privacy measures in systems and applications.
Solutum Cumulus Mediocris
Explore cloud security vulnerabilities and attack techniques with expert Eldar Marcussen, focusing on practical exploitation methods and defensive strategies.
Abusing the Internet of Things - Blackouts, Freakouts, and Stakeouts
Explore IoT vulnerabilities in smart devices like Hue lights, baby monitors, and Tesla cars. Learn about potential security risks and future malware threats in connected technologies.