Blended Threats and JavaScript - A Plan for Permanent Network Compromise
Explore advanced browser-based attacks using JavaScript and HTML5, focusing on exploiting network devices and achieving persistent compromise of intranet systems.
Trust Transience - Post Intrusion SSH Hijacking
Explore post-intrusion SSH hijacking techniques and their implications for network security. Learn about trust transience and advanced exploitation methods in this cybersecurity deep dive.
Adventures in Bouncer Land
Explore techniques for bypassing Google Play's security measures, including strategies for evading detection and transforming benign apps into malicious ones.
Are You My Type? Breaking .NET Sandboxes Through Serialization
Explore vulnerabilities in .NET serialization, including attacks on applications and sandbox breakouts. Learn about security issues, mitigation strategies, and the impact on .NET technologies.
AMF Testing Made Easy
Reshaping AMF fuzzing with automated gray-box testing. Learn to build custom AMF messages, dynamically generate objects, and improve fuzzing coverage for complex applications using the Blazer Burp Suite plugin.
Rogue Squadron - Evil Twins, 802.11intel, Radical RADIUS, & Weaponry for Windows
Explore advanced wireless network security techniques, including evil twin attacks, 802.11 intelligence gathering, RADIUS exploitation, and Windows-based tools for penetration testing.
Toolkits - All-in-One Approach to Security
Explore comprehensive security toolkits for efficient vulnerability assessment and penetration testing. Learn to leverage all-in-one solutions for enhanced cybersecurity practices.
Demystifying MS SQL Server & Oracle Database Server Security
Uncover vulnerabilities and enhance security measures for MS SQL Server and Oracle Database Server in this comprehensive exploration of database security.
Automation - Deus ex Machina or Rube Goldberg Machine?
Explore the pros and cons of automation in cybersecurity, examining its potential as a powerful tool or a complex, inefficient solution in penetration testing and security assessments.
A New Hybrid Approach for Infrastructure Discovery, Monitoring, and Control
Explore innovative hybrid techniques for network infrastructure discovery, monitoring, and control in this comprehensive cybersecurity presentation by expert Ofir Arkin.
Remote Windows Kernel Exploitation - Step Into the Ring 0
Explore remote Windows kernel exploitation techniques, including exception handling, memory analysis, and kernel heap overflow, with insights on payload creation and interrupt vector overriding.
Plug and Root - The USB Key to the Kingdom
Explore USB device vulnerabilities and potential security risks in computer systems, focusing on automated attacks and defense strategies.
Stepping P3wns - Adventures in Full-Spectrum Embedded Exploitation and Defense
Demonstration of embedded device exploitation and defense techniques, showcasing a polyspecies worm and Symbiote defense system for printers, phones, and routers.
The Factoring Dead - Preparing for the Cryptopocalypse
Explore cryptographic vulnerabilities, recent breakthroughs in discrete mathematics, and their impact on RSA. Learn how to prepare for potential crypto apocalypse scenarios and operate in a post-RSA world.
Let's Get Physical - Breaking Home Security Systems and Bypassing Controls
Explore covert methods to bypass home and office security systems, including intercepting signals and manipulating keypads, with live demonstrations of vulnerabilities in digital physical security.
Injecting Malware into iOS Devices via Malicious Chargers
Demonstration of iOS device vulnerability through malicious chargers, bypassing security mechanisms to inject arbitrary software within one minute of connection, using a proof-of-concept called Mactans.
How to Build a SpyPhone
Explore Android SpyPhone creation, including live demos of phone tracking, call/SMS interception, data extraction, and covert camera/mic activation. Learn injection techniques for any Android app.
Million Browser Botnet
Explore how online advertising networks can be exploited to create massive browser botnets, enabling DDoS attacks, spam campaigns, and password cracking without malware or zero-day vulnerabilities.
Evading Deep Inspection for Fun and Shell
Explore TCP/IP reassembly vulnerabilities in security devices and learn evasion techniques to bypass deep packet inspection, potentially compromising network defenses.
Exploiting Network Surveillance Cameras Like a Hollywood Hacker
Explore 0-day vulnerabilities in network surveillance cameras, learn how to exploit them for administrative access, and witness a Hollywood-style video stream manipulation demonstration.
What's on the Wire? Physical Layer Tapping with Project Daisho
Explore physical layer tapping for network security research with Project Daisho, an open-source tool for monitoring and modifying wired protocols like Ethernet, HDMI, and USB 3.0.