From ASCII to UTF-16: Leveraging Encodings to Break Software
Explore how character encodings can be exploited to compromise software security, from basic ASCII to complex UTF-16, in this technical IT security talk.
Open Sesame: Stack Smashing Your Way into Opening Doors
Explore stack smashing techniques to bypass security measures in electronic door locks, uncovering vulnerabilities and potential exploits in physical access control systems.
Introduction to Risk Analysis and Management in Security - Lecture 7
Comprehensive overview of risk analysis, management, and security incident taxonomy in cybersecurity, covering eavesdropping, denial of service, and cloud computing concepts.
Introduction to Risk Analysis in Security and Network Forensics - Chapter 7
Explore risk analysis, management methodologies, and security incident taxonomy. Learn about various cyber threats and attack types, as well as cloud computing concepts and services.
Progress on Bounds Checking in C and the Linux Kernel
Explore advancements in C bounds checking for Linux, focusing on flex array members, dynamic object size, and new struct member attributes to prevent buffer overflow vulnerabilities.
ChatGPT Examples for Programming, InfoSec, and Fuzzing
Explore ChatGPT's versatility in programming, security, and daily tasks. Learn to create fuzzers, analyze code, find vulnerabilities, and leverage AI for various applications.
Out of the -v-Box
Análisis técnico de vulnerabilidades en VirtualBox para lograr un escape de máquina virtual, incluyendo ingeniería inversa, explotación y demostración práctica del exploit.
Fuzzing - Finding Your Own Bugs and 0days
Aprende técnicas de fuzzing para descubrir vulnerabilidades y exploits de día cero. Incluye demostraciones prácticas de Buffer Overflow y creación de shellcode para pruebas de penetración.
Init 1 - Buffer Overflow
Aprende a explotar vulnerabilidades de desbordamiento de búfer en Windows, ejecutar comandos y automatizar ataques usando Python y Metasploit para obtener conexiones inversas desde el cliente.
Stack Buffer Overflow Exploits - Wie ein "harmloses" Dokument einen Rechner infizieren kann
Erklärung und Demonstration von Stack Buffer Overflow-Exploits für Nicht-Fachleute. Zeigt anschaulich, wie scheinbar harmlose Dokumente Rechner infizieren können, mit Live-Demo.
In Soviet Russia Smart Card Hacks You
Explore vulnerabilities in smart card drivers and middleware through fuzzing and auditing, revealing security flaws that challenge assumptions about smart card trustworthiness.
Next-Gen IoT Botnets - Bad Implementations of Good Cloud Platforms
Explore security vulnerabilities in IoT cloud platforms, including authentication bypasses and remote code execution. Learn about the risks of poor implementations and their widespread impact on connected devices.
Sanitize, Fuzz, and Harden Your C++ Code
Explore dynamic testing tools for C/C++, including Sanitizers and libFuzzer, to find and prevent various bugs. Learn about security hardening techniques like Control Flow Integrity and Safe Stack.
Dial V for Vulnerable - Attacking VoIP Phones
Explore VoIP phone vulnerabilities, attack methods, and security recommendations. Learn firmware access, emulation approaches, and exploit development for various VoIP devices.
From EK to DEK - An Analysis of Modern Document Exploit Kits
Explore modern document exploit kits, their infection chains, and techniques. Gain insights into ThreadKit, VenomKit, and various exploitation methods used in malicious documents.
Bug Hunting on the Dark Side
Explore bug hunting techniques in dark web applications, focusing on real-world examples, cryptography, and common vulnerabilities to enhance your cybersecurity skills.
Smart Vacuum Cleaners as Remote Wiretapping Devices - Easterhegg - 2019
Exploración de vulnerabilidades en aspiradoras inteligentes Neato Botvac Connected, incluyendo extracción de firmware y ejecución remota de código, con implicaciones para la privacidad y seguridad del hogar.
Next-Gen IoT Botnets - Moar Ownage at DefCamp - 2019
Explore advanced IoT botnet techniques, including hardware hacking, bootloader hijacking, and exploiting vulnerabilities in security cameras and enterprise messaging systems.
Breaking and Protecting Linux Kernel Stack
Explore Linux kernel stack vulnerabilities, existing protections, and potential improvements like RANDOMIZE_KSTACK_OFFSET. Gain insights into security measures and performance implications.
Exploiting Buffer Overflows on RISC-V
Explore RISC-V architecture, buffer overflow exploitation, and shellcode creation. Learn to perform ret2libc attacks and understand key differences from Intel and ARM architectures.
WebAssembly - A New World of Native Exploits on the Browser
Explore WebAssembly's security risks, low-level semantics, and potential vulnerabilities in browser-based applications. Learn about linear memory, function tables, and mitigation strategies.