Android - One Root to Own Them All
Explore Android security vulnerabilities, focusing on bug 8219321's impact on cryptographic verification and system control. Learn about exploit creation and its implications for device security.
Honey, I'm Home! - Hacking Z-Wave Home Automation Systems
Explore vulnerabilities in Z-Wave home automation systems, including protocol analysis, key extraction, and potential attack vectors. Learn about security implications for smart home devices and networks.
Hiding at Depth - Exploring, Subverting and Breaking NAND Flash Memory
Explore NAND Flash vulnerabilities, learn to hide and discover files on mobile devices, and understand implications for digital forensics and device security. Open-source tools for Android demonstrated.
Lawful Access Panel
Panel discussion on legal and technical challenges of secret surveillance orders, including National Security Letters and lawful intercepts. Experts explore risks, defenses, and experiences fighting invasive searches in networks.
OPSEC Failures of Spies
Revealing CIA's operational security failures in high-profile cases, highlighting the agency's technological naivety and its consequences for intelligence gathering and international relations.
Clickjacking Revisited - A Perceptual View of UI Security
Explores UI security vulnerabilities from a perceptual perspective, presenting novel attacks that bypass current defenses and discussing potential countermeasures and their limitations.
TLS Secrets
Exploring vulnerabilities in SSL/TLS standards, implementations, and configurations, with focus on lesser-known security flaws. Includes tool release for forensic plaintext recovery.
Java Every-Days - Exploiting Software Running on 3 Billion Devices
Explore Java vulnerabilities, exploitation trends, and security measures in this Black Hat talk. Gain insights into common weaknesses, attack surfaces, and Oracle's responses to protect 3 billion devices.
Multiplexed Wired Attack Surfaces
Explore techniques for accessing mobile device interfaces through multiplexed wired connections, including gaining shell access and using open-source tools for interface exploration.
SSL, Gone in 30 Seconds - A BREACH Beyond CRIME
Unveiling new techniques to extract encrypted secrets from HTTPS channels, demonstrating a practical attack against enterprise products and discussing mitigation strategies.
Press ROOT to Continue - Detecting OSX and Windows Bootkits with RDFU
Explore UEFI rootkit detection with RDFU framework. Learn about OSX bootkit functionality, including password sniffing and privilege escalation. Discover tools to combat emerging UEFI-based threats.
UART Thou Mad?
Explore UART's significance in hardware vulnerability research, tools for working with it, and its potential for repurposing hardware. Learn best practices for securing UART-enabled products.
Bluetooth Smart - The Good, The Bad, The Ugly, and The Fix
Comprehensive exploration of Bluetooth Smart technology, covering its design, vulnerabilities, and proposed security enhancements, with live demonstrations and open-source tool implementations.
Legal Considerations for Cellular Research
Legal overview for security researchers investigating mobile communications, covering EULAs, device rooting, and intercepting communications. Essential guidance for cellular system vulnerability research.
How CVSS is DOSsing Your Patching Policy - and Wasting Your Money
Explore the effectiveness of CVSS as a vulnerability risk metric, analyzing its impact on patching policies and resource allocation through real-world attack data and statistical analysis.
Buying into the Bias - Why Vulnerability Statistics Suck
Explores flaws in vulnerability statistics, revealing biases and misinterpretations. Provides insights on critically evaluating security studies and understanding limitations of vulnerability data for better decision-making.
I Can Hear You Now - Traffic Interception & Remote Mobile Phone Cloning
Explore femtocell vulnerabilities in cellular networks, demonstrating traffic interception, active attacks, and remote mobile device cloning without physical access.
A Tale of One Software Bypass of Windows 8 Secure Boot
Exploring vulnerabilities in Windows 8 Secure Boot, demonstrating a full software bypass, and discussing how to avoid security mistakes in UEFI-based platforms.
Funderbolt - Adventures in Thunderbolt DMA Attacks
Explore Thunderbolt technology's security risks through reverse engineering. Learn about DMA attack strategies and potential vulnerabilities in high-speed data transfer ports on modern computers.
Microsoft Office Password Protection System and Encryption Holes in MS Windows Applications
Explore vulnerabilities in Microsoft Office password protection and encryption systems, uncovering potential security risks in Windows applications.
Java & Java Virtual Machine Security Vulnerabilities & Exploitation Techniques
Explore Java and JVM security vulnerabilities, exploitation techniques, and potential risks in this comprehensive presentation by Last Stage of Delirium.