Don't Ruck Us Too Hard - Owning All of Ruckus AP Devices
Explore vulnerabilities in Ruckus AP devices, including pre-authentication remote code execution exploits. Learn about research methods, discovered CVEs, and a framework for cross-architecture analysis.
The Insecurity of Cloudless Smart Door Systems
Explore vulnerabilities in cloudless smart door systems for large buildings, focusing on IP-gateway security risks and potential exploits in intercom-IP integration.
Hardware Security Module - Executing Unsigned Code in HSM TEE
Explore a novel attack on HSM digital signature verification, enabling execution of unsigned code in protected environments. Insights applicable to similar systems.
Network Attached Shell - N.A.S.ty Systems that Store Network Accessible Shells
Explore critical vulnerabilities in network storage devices, their impact on data security, and potential for network exploitation. Learn about attack techniques and implications for IT professionals and consumers.
Commix - Detecting and Exploiting Command Injection Flaws
Automated tool for detecting and exploiting command injection vulnerabilities in web applications. Covers various exploitation scenarios and reveals 0-day vulnerabilities across different platforms.
Breaking BHAD - Abusing Belkin Home Automation Devices
Exploración de vulnerabilidades en dispositivos de automatización del hogar Belkin WeMo, revelando fallas de seguridad y demostrando ataques potenciales en la infraestructura IoT.
Attacking Industrial Remote Controllers
Exploring vulnerabilities in industrial RF remote controllers, revealing security flaws and potential attacks. Includes demos, findings, and recommendations for improving safety in IIoT applications.
Understanding How Public Places Introduce Additional Risks to Business - Len Noe
Explore public space cybersecurity risks for businesses, covering captive portals, QR codes, and physical attacks. Learn defensive strategies and awareness techniques.
Network Attached Shell - N.A.S.ty Systems that Store Network Accessible Shells
Explore critical vulnerabilities in network storage devices, their impact on data security, and implications for network infrastructure. Learn about attack methods and the importance of robust security measures.
Contemporary Automatic Program Analysis
Explore automatic program analysis techniques for vulnerability discovery, from historical context to cutting-edge methods, with practical examples and demos for effective security research.
Practical Exploitation Using A Malicious Service Set Identifier - SSID
Explore SSID exploitation techniques for wireless device attacks, including XSS, CSRF, and command injection. Learn about limitations, risk factors, and see live demonstrations of these methods.
Practical Exploitation Using A Malicious Service Set Identifier - SSID - Deral Heiland
Explore SSID exploitation techniques, including device limitations, cross-site scripting, and command injection. Learn practical methods for testing and exploiting vulnerabilities in wireless networks.
Scrutinizing WPA2 Password Generating Algorithms in Wireless Routers
Scrutinizing WPA2 password generation algorithms in wireless routers, revealing vulnerabilities, backdoors, and security flaws in various router brands. Highlights methods for obtaining firmware and exploiting weaknesses.
Hacking Virtual Appliances
Explore techniques for hacking virtual appliances, including command injection, filesystem analysis, and undocumented accounts. Learn about security vulnerabilities and vendor communication.
Inside Dash Cam Custom Protocols and Security Vulnerabilities
Delve into comprehensive security analysis of network-connected dash cams, exploring vulnerabilities in boot processes, custom protocols, and configuration systems across multiple international manufacturers.
Exploiting Security Vulnerabilities in Microhard Radio Equipment
Uncover critical security vulnerabilities in Microhard's radio equipment, including command injections and buffer overflows, while exploring implications for SCADA and utility systems.
New Isn't Always Novel - Finding Basic Vulnerabilities in Enterprise Software
Discover how basic vulnerabilities in enterprise software led to a successful Pwn2Own contest entry, featuring a command injection exploit in Lexmark printers and practical security insights.
Hacking Power Management in Data Centers - Security Vulnerabilities and Exploits
Delve into data center power management security, exploring vulnerabilities in PDUs and DCIM systems while learning critical infrastructure protection strategies and attack vectors.
Black Hat USA 2025
Black Hat USA 2025
Black Hat Asia 2025
Black Hat Asia 2025
Black Hat Europe 2024
Black Hat Europe 2024