Serverless Infections - Malware Just Found a New Home
Explore serverless architecture vulnerabilities and learn how malware can exploit AWS Lambda functions, with insights on prevention and security best practices.
Serverless Infections - Malware Just Found a New Home
Explore serverless security risks through a live demo of RCE attacks, data infiltration, and self-duplicating malware in cloud environments. Learn best practices for securing serverless architectures.
Return of the Insecure Brazilian Voting Machines
Análise detalhada da segurança do software de votação brasileiro, baseada em resultados de um desafio de hacking restrito organizado pela autoridade eleitoral nacional.
Windows Notification Facility - Peeling the Onion of the Most Undocumented Kernel Attack Surface Yet
Explore the undocumented Windows Notification Facility, its architecture, and potential security implications. Learn about state names, data publishing, and consuming, as well as attack vectors and defensive strategies.
HTTP Statuses as C2 Commands and Compromised TLS
Explore innovative malware techniques using HTTP statuses as C2 commands and compromising TLS encryption. Learn about COMPFun's evolution and its impact on cybersecurity.
Zen - A Complex Campaign of Harmful Android Apps
Explore Android malware techniques, from repackaging apps to sophisticated rooting trojans. Learn about click fraud, exploit bundling, and persistence mechanisms used by malicious actors.
Please Inject Me - A x64 Code Injection
Explore advanced x64 code injection techniques, focusing on practical implementation and security implications in modern Windows systems.
Dirty Bin Cache - A New Code Injection Poisoning Binary Translation Cache
Uncover a novel code injection vulnerability in Rosetta 2, exploring its impact on Apple Silicon Macs and discussing potential security implications for binary translation caches.
With BIGDATA Comes BIG Responsibility - Practical Exploiting of MDX Injections
Explore OLAP technology vulnerabilities in Business Intelligence systems, focusing on MDX-related attacks, code injection, and data retrieval vectors. Learn practical exploitation techniques for critical corporate data.
Injectso - Modifying and Spying on Running Processes Under Linux
Explore advanced techniques for modifying and monitoring active Linux processes, focusing on injection methods and real-time surveillance strategies.
.NET from the Hacker's Perspective - Part 2
Explore advanced .NET security vulnerabilities and exploitation techniques, focusing on real-world attack scenarios and defensive strategies for developers and security professionals.
Playing Video Games One Frame at a Time
Explore how programmers can create tools to assist in playing video games, including code injection and system interactions, with examples in C++.
Process Ventriloquism
Explore process manipulation techniques for Windows, including API methods, library injection, hooking, and memory scraping. Learn to inject Python interpreters for advanced control.
Leaving No Stone Unturned
Explore memory forensics techniques for digital investigations, covering attack methodologies and analysis steps. Learn to uncover hidden evidence in volatile memory samples for more comprehensive case insights.
Dynamic Polymorphism With Code Injection and Metaclasses
Explore advanced C++ techniques for dynamic polymorphism using code injection and metaclasses, offering alternatives to traditional virtual functions and inheritance for improved performance and flexibility.
CPython Bugs and Risky Features
Explore security risks in CPython, including directory vulnerabilities, code injection possibilities, and socket issues. Learn about potential threats and mitigation strategies for Python developers and administrators.
AST Meta-programming
Explore AST meta-programming in Swift for code injection and aspect-oriented programming. Learn practical examples and automation techniques with SauceKit.
Three Unlikely Successful Features of D
Explore three unconventional D language features that gained widespread adoption, examining their unexpected utility and impact on programming practices.
Secure AI Orchestration: Mitigating Model-centric Attacks with Flyte
Discover how to protect AI systems from model-centric attacks, focusing on code injection and LLM vulnerabilities, while implementing security measures using Flyte orchestration and open-source tools.
Cybersecurity Vulnerabilities in Precision Time Protocol - Attacks and Mitigations
Explore critical cybersecurity vulnerabilities in IEEE 1588's Precision Time Protocol through experimental findings, including spoofing, DoS attacks, data injection, and covert channels, with proposed mitigation strategies.
Prototype Pollution Leading to Remote Code Execution in NodeJS
Delve into prototype pollution vulnerabilities in Node.js, exploring how they enable remote code execution, analyzing real-world exploits, and understanding recent security mitigations.