Attacking Encrypted VOIP Protocols
Explore techniques for intercepting and decrypting encrypted SIP sessions, and learn about a new tool for streamlined password recovery in VOIP protocols.
IPv6 Insecurity Revolutions
Explore IPv6 security vulnerabilities and auditing techniques with Marc Heuse. Learn about new attack vectors and tools for penetration testing in IPv6 networks.
Why Telcos Keep Getting Hacked
Explore telecom security vulnerabilities, from historical blue-boxing to modern cyberwarfare. Learn about hacking techniques, interception systems, and countermeasures to protect privacy in the face of evolving threats to critical infrastructure.
The Journey to ICS
Explore operational technology risks, industrial control systems, and network architecture in critical infrastructure. Learn about common weaknesses and protective measures for control systems.
When Fuzzing Meets SAP Network Services
Exploring fuzzing techniques for SAP network services, overcoming challenges in performance, protocol complexity, and crash reproduction to discover critical vulnerabilities in custom network protocols.
Giovanni Cruz - Atacando VoIP: un paraíso - Ekoparty 2010
Exploración de vulnerabilidades y técnicas de ataque en sistemas VoIP, revelando riesgos de seguridad y estrategias de protección en comunicaciones de voz sobre IP.
Logs Told Us It Was DNS, It Looked like DNS, It Had to Be DNS, It Wasn't DNS
Unraveling a complex Kubernetes incident: from DNS suspicions to kernel-level insights, culminating in a surprising three-line code fix. Learn debugging techniques and unexpected system behaviors.
Slitheen - Perfectly Imitated Decoy Routing Through Traffic Replacement
Explore a novel decoy routing technique for censorship circumvention, featuring traffic replacement to perfectly imitate overt destinations and enhance user privacy.
All Your DNS Records Point to Us - Understanding the Security Threats of Dangling DNS Records
Explore security threats of dangling DNS records, understanding vulnerabilities and potential exploits in domain name systems.
Counterfeiting the Pipes with FakeNet 2.0 - Part 2
Learn to simulate networks for malware analysis using FakeNet 2.0. Capture network signatures, mimic protocols, and defeat malware through hands-on challenges with real-world samples.
BLEEDINGBIT - Your APs Belong to Us
Explore zero-day vulnerabilities in BLE chips, allowing unauthenticated network penetration. Learn about BLEEDINGBIT, its impact on enterprise APs, and potential attack scenarios.
Tracking Ransomware End to End
Explore the rise of ransomware, its revenue model, and tracking methods. Learn about Bitcoin usage, victim payments, and evolving cybercrime tactics in this comprehensive analysis.
Recording at Scale Across Your Global Network Is Essential for Your Cyber Security Posture
Explore essential strategies for global network recording to enhance cybersecurity. Learn about threat landscapes, Netflow, forensics, and cost-effective solutions for improved security posture.
Qualcomm WiFi - Infinity War
Explore critical security vulnerabilities in Qualcomm WiFi chips, focusing on 0-click remote attacks and their potential impact on millions of smartphone users worldwide.
Clocking On
Explore the fascinating world of securing time distribution on the Internet, delving into atomic clocks and the challenges of maintaining a consensus on "current" time.
WireGuard - Next Generation Secure Network Tunnel
Explore WireGuard, a modern VPN protocol offering improved security, performance, and simplicity compared to traditional options like IPsec and OpenVPN. Learn about its innovative design and benefits.
Tales from the NOC - Going Public in Asia
Insider look at designing and securing Black Hat Asia's network infrastructure. Explore behind-the-scenes challenges, experiences, and evolving designs from the Network Operations Center team.
Routopsy - Modern Routing Protocol Vulnerability Analysis and Exploitation
Explore vulnerabilities in dynamic routing and redundancy protocols, learn about common misconfigurations, and discover techniques for network attacks and discovery in this comprehensive analysis.
Virtually Private Networks
Explore the security implications of remote access solutions and VPNs for enterprise mobile workforces, examining potential vulnerabilities and challenges.
Misuse of DNS - The Second Most Used Protocol
Explore DNS vulnerabilities and attacks, examining the protocol's critical role in internet traffic and its ongoing security challenges as IPv6 adoption grows.
Old Dog, New Tricks - Forensics With PowerShell
Explore PowerForensics: a PowerShell-based toolset for live digital forensics and incident response, enabling efficient investigation of advanced cyber threats without system imaging.