Compromising Industrial Facilities From 40 Miles Away
Explore vulnerabilities in industrial wireless automation systems, revealing how key distribution weaknesses can be exploited to compromise critical infrastructure from long distances.
Out of Control - Demonstrating SCADA Device Exploitation
Explore SCADA device exploitation in oil and gas pipelines, examining control systems, vulnerabilities, and potential consequences of security breaches in critical infrastructure.
The Outer Limits - Hacking the Samsung Smart TV
Explore vulnerabilities in Samsung Smart TVs, including remote hijacking, userland rootkits, and surveillance capabilities. Learn about attack surfaces, security flaws, and potential fixes for smart platforms.
KickaaS Security with Automation and Cloud
Explore cutting-edge security automation techniques for cloud environments, focusing on resource management, host protection, and identity control.
Pixel Perfect Timing Attacks with HTML5
Exploring JavaScript timing attacks to extract sensitive browser data, demonstrating cross-browser vulnerabilities and discussing challenges in fixing these security issues.
Hacking Like in the Movies - Visualizing Page Tables for Local Exploitation
Visualizing page tables to break ASLR and find vulnerabilities across operating systems. Includes an Android ASLR bypass and insights for Windows, Linux, and iOS.
Legal Aspects of Full Spectrum Computer Network - Active Defense
Explores legal implications of active cyber defense, covering technology, information control, and controversial practices. Emphasizes importance of collaboration between security professionals and legal counsel.
A Practical Attack Against MDM Solutions
Unveiling spyphone attacks: A proof-of-concept technique bypassing mobile malware detection and MDM features, demonstrating vulnerabilities in mobile security and surveillance risks.
What Security Researchers Need to Know About Anti-Hacking Law
Explore legal risks for security researchers under the Computer Fraud and Abuse Act, including key cases, implications, and strategies to avoid legal trouble in cybersecurity work.
Detecting Bugs Using Decompilation and Data Flow Analysis
Explore Bugwise, a free online service for detecting software bugs through decompilation and data flow analysis, showcasing its success in finding vulnerabilities in Debian Linux.
Lessons from Surviving a 300Gbps Denial of Service Attack
Insights from a record-breaking DDoS attack: strategies, vulnerabilities, and defensive measures for safeguarding networks against evolving cyber threats.
Is That a Government in Your Network or Are You Just Happy to See Me?
Explore techniques for identifying and defending against long-term network intrusions by foreign intelligence agencies, with insights on open-source tools for detecting impersonation attacks.
Hunting the Shadows - In Depth Analysis of Escalated APT Attacks
In-depth analysis of APT attacks targeting Taiwan, showcasing automated detection systems, forensic techniques, and insights into attacker operations. Includes release of collaborative APT classification platform.
New Optimization and Obfuscation Techniques
Advanced SQL injection techniques for bypassing firewalls and intrusion detection systems, including optimization methods and the Leapfrog framework for testing security measures.
The SCADA That Didn't Cry Wolf - Who's Really Attacking Your ICS Devices
Profiling and analyzing real-world attacks on industrial control systems, revealing surprising findings about attacker tactics, origins, and motivations in ICS security.
Smashing the Font Scaler Engine in Windows Kernel
Exploring vulnerabilities in Windows Font Scaler Engine, including its structure, smart fuzzing methods, and potential attack vectors. Demonstrates new TrueType font vulnerabilities on Windows 8 and 7.
Untwining Twine
Explore the analysis and exploitation of Twine, a consumer IoT device, through reverse engineering, traffic capture, and firmware analysis. Learn techniques for understanding embedded systems.
CrowdSource - Crowd Trained Machine Learning Model for Malware Capability Detection
Innovative machine learning tool for automated malware capability detection, trained on web technical documents. Provides probabilistic and traceable output for rapid reverse engineering of active malware variants.
Teridian SoC Exploitation - Harvard Architecture Smart Grid Systems
Exploitation techniques for Teridian 8051-based SoCs in smart grid systems, covering architecture, security barriers, and methods to gain code execution and firmware access.
Denying Service to DDOS Protection Services
Explore vulnerabilities in cloud-based DDoS protection services and learn techniques to bypass and unmask protected websites using the "No Cloud Allowed" tool.
Universal DDoS Mitigation Bypass
Explores weaknesses in DDoS mitigation techniques, demonstrating bypass methods for various protection layers. Introduces a PoC tool for near-perfect mitigation evasion, highlighting vulnerabilities in current defense strategies.