Security Vulnerability Mitigations
Explore security vulnerability mitigations, from classic buffer overflows to modern ROP attacks. Learn about OpenBSD's innovative defenses and their adoption across platforms.
Exploiting Security Vulnerabilities in Microhard Radio Equipment
Uncover critical security vulnerabilities in Microhard's radio equipment, including command injections and buffer overflows, while exploring implications for SCADA and utility systems.
Finding Zero-Day Vulnerabilities in Vilo Home Routers - Security Research Process and Discoveries
Discover how student researchers uncovered 9 zero-day vulnerabilities in Vilo routers through hardware hacking, firmware analysis, and cloud infrastructure investigation, highlighting IoT security challenges.
Process Injection Attacks with Return-Oriented Programming - Advanced Techniques and Methodologies
Discover advanced process injection techniques using return-oriented programming (ROP), including unique string comparison solutions, multiple WinAPI patterns, and practical methodologies for reliable implementation.
Ghosts and Gadgets - Common Buffer Overflows That Still Haunt Our Networks
Explore common buffer overflow vulnerabilities in network systems, their detection methods, and practical mitigation strategies for securing modern networks.
Debugging Memory Issues with Valgrind and GDB
Discover techniques for debugging memory issues using Valgrind and GDB in C/C++ programs. Learn to identify and resolve buffer overflows, memory leaks, and other low-level errors efficiently.
Exploiting USB-IP in Linux
Explore USB/IP vulnerabilities in Linux, including buffer overflow and data injection. Learn about architecture, protocol, and security implications of this USB device sharing framework.
Fuzzing - Finding Your Own Bugs and Zero-Days
Master the art of fuzzer creation and vulnerability discovery, exploring buffer overflow exploitation techniques with hands-on demonstrations and practical exploit development strategies.
Contactless Overflow Code Execution Vulnerabilities in Payment Terminals and ATMs
Uncover critical NFC payment terminal vulnerabilities and their exploitation through contactless attacks, including ATM jackpotting techniques and firmware manipulation across major payment systems worldwide.
Smashing the Stack: Making Memory-Unsafe Code Less Exploitable - RSA Conference 2023
Explore memory-unsafe code vulnerabilities, their historical impact, and practical mitigations. Learn why this critical issue persists and how developers can enhance software security.
Memory-Safe C++ - Addressing Common Vulnerabilities
Explore memory-safe C++ with a new compiler and runtime that detects vulnerabilities without source code changes. Learn static analysis techniques and runtime checks for enhanced software security.
Go Go Gadget Hammer: Flipping Nested Pointers for Arbitrary Data Leakage
Explore a novel Rowhammer exploit technique targeting nested pointer dereferences in code patterns, demonstrating enhanced data leakage capabilities and improved attack primitives in Linux kernel security.
Not Quite Write: On the Effectiveness of Store-Only Bounds Checking
Explore the security limitations of store-only bounds checking in C/C++ code, examining bypass vulnerabilities and potential defenses for compiler-based memory safety enforcement.
Black Hat USA 2025
Black Hat USA 2025
Black Hat Asia 2024
Black Hat Asia 2024
Black Hat Europe 2023
Black Hat Europe 2023
Black Hat USA 2023
Black Hat USA 2023
Black Hat Asia 2025
Black Hat Asia 2025
Black Hat Europe 2024
Black Hat Europe 2024