A New Class of DNS Vulnerabilities Affecting Many DNS-as-Service Platforms
Explore novel DNS vulnerabilities affecting major cloud providers, their impact on corporate networks, and potential information leakage. Learn about root causes, exploitation methods, and mitigation strategies.
IPvSeeYou - Exploiting Leaked Identifiers in IPv6 for Street-Level Geolocation
Explore a data fusion attack on IPv6 home routers for precise street-level geolocation, uncovering millions of devices worldwide and discussing privacy implications.
Common Flaws in ICS Network Protocols
Análisis de vulnerabilidades comunes en protocolos de red ICS, incluyendo públicos y privados. Demuestra ataques potenciales como inyección de comandos y sniffing de tráfico sin cifrado en infraestructuras críticas.
The Sum of All Fears - When ICS - SCADA Are Compromised
Explore ICS/SCADA cybersecurity threats, attack vectors, and protection strategies. Learn to analyze industrial protocols, write exploits, and implement effective defense measures for critical infrastructure.
Capture This - Real Time Packet Processing With FPGAs
Explore real-time packet processing using FPGAs, focusing on Ethernet connections, FPGA architecture, and implementing network applications with hardware-level optimizations.
IPv666 - Address of the Beast
Explore IPv6 security implications, addressing schemes, and potential vulnerabilities. Learn about honeypot servers, machine learning applications, and techniques for identifying aliased networks in IPv6 environments.
Exploiting Automation in LTE Mobile Networks
Exploración de vulnerabilidades en la automatización de redes LTE, demostrando métodos de ataque y discutiendo contramedidas para operadores y usuarios finales.
In Depth Analysis of Multicast DNS and DNS Service Discovery
Análisis profundo de los protocolos mDNS y DNS-SD, explorando sus vulnerabilidades inherentes y posibles vectores de ataque en entornos de red de configuración cero.
A Surprise Encounter With a Telco APT
Exposé of a sophisticated telco hack, revealing methodologies, tools, and protocols used by a suspected state actor. Insights from a live session observation and forensic analysis of a mobile network operator intrusion.
Exploiting Windows Automatic Wireless Association
Exploiting Windows automatic wireless association with "Lure10" technique. Demonstrates man-in-the-middle attack using Wifiphisher tool. Discusses WiFi security, countermeasures, and protection strategies across operating systems.
DFEx - DNS File Exfiltration
Explore DNS file exfiltration techniques, including a unique protocol for bypassing NG Firewalls. Learn about HIPS tricks and innovative approaches to data transfer across networks.
Finding Vulnerabilities in iOS - MacOS Networking Code
Explore iOS/macOS networking vulnerabilities, focusing on mbuf processing in XNU kernel. Learn about network packet structures, vulnerability discovery techniques, and PoC exploit development.
WiCy - Monitoring 802.11AC Networks At Scale
Explore challenges in 802.11ac network monitoring and learn to create a custom monitoring platform using repurposed access point hardware. Gain practical knowledge and scripts for implementation.
Rise of the WarPi
Explore WarRoaming techniques, custom gear, and strategies for efficient WiFi discovery. Learn from a top-ranked WiGLE.net contributor's journey and insights into wireless surveying and intelligence gathering.
Chamois - The Most Impactful Android Botnet of 2018
Explore the sophisticated Chamois Android botnet, its technical complexity, anti-detection techniques, and impact on ad fraud. Learn about its infrastructure and strategies to combat this significant threat.
The GCP Metadata API - Security Considerations, Vulnerabilities, and Remediations
Explore GCP Metadata API security: risks, attacks, defenses, and best practices. Learn about service accounts, Kubernetes, and Cloud Build implications for your organization's cloud infrastructure.
Hanging on the Telephone - Hacking VoIP
Explore VoIP vulnerabilities and hacking techniques, from historical phone phreaking to modern threats like toll fraud and vishing, with insights on protecting communication systems.
Systems That Run Forever - Self-Heal and Scale
Explore architectural principles for building scalable, fault-tolerant systems using isolated parallel components, error detection, and live code upgrades, with insights from Erlang's design.
Back to the Future - Cross-Protocol Attacks in the Era of 5G
Explore vulnerabilities in mobile network protocols across generations and learn about cross-protocol attacks in 5G networks, presented by security expert Sergey Puzankov.
Kr00k - Serious Vulnerability Affected Encryption of Billion+ Wi-Fi Devices
Explore the Kr00k vulnerability affecting Wi-Fi encryption on billions of devices. Learn about its impact, technical details, and see a live demonstration of exploiting this security flaw in popular Wi-Fi chips.
The Black Hat Europe NOC Report
Explore the evolution of Black Hat's Network Operations Center, adapting to virtual events while maintaining security. Learn about infrastructure, tools, and challenges in managing a notorious network.