Cracking Cicada 3301: A Journey Through the Liber Primus Cryptographic Challenge
Delve into the fascinating journey of cryptographers attempting to solve Cicada3301's Liber Primus, exploring collaborative puzzle-solving techniques, community persistence, and cryptographic challenges since 2014.
An Audacious Plan to Halt the Internet's Enshittification
Explore how internet platforms evolve from user-friendly to exploitative, and discover practical solutions including antitrust measures, privacy laws, and user empowerment tools to combat digital degradation.
Growing the Community of AI Hackers with Generative Red Team Testing
Dive into the groundbreaking world of AI security testing, exploring red team methodologies, algorithmic bounties, and practical strategies for evaluating Large Language Models beyond basic exploits.
Smashing the State Machine: Advanced Web Race Condition Attacks
Discover advanced web race-condition attack techniques, from limit-overrun exploits to state machine manipulation, with practical methodologies and tools for identifying and exploiting vulnerabilities.
Unparalleled RDP Monitoring to Reveal Attackers' Tradecraft
Dive into advanced RDP attack monitoring techniques and threat actor behaviors through a unique D&D-themed analysis of cybersecurity tradecraft and defensive strategies.
Physical Attacks Against Smartphones: Android Security Vulnerabilities and Exploits
Discover physical attack vulnerabilities in Android smartphones, from Recovery mode exploits using SD cards to USB stack weaknesses in secondary bootloaders for achieving root access and code execution.
Weaponizing Plain Text ANSI Escape Sequences - A Forensic Nightmare
Explore how ANSI escape sequences can be weaponized to compromise log files, and learn essential prevention techniques for securing modern application logging systems and forensic investigations.
Video-Based Cryptanalysis: Extracting Keys from Power LEDs
Discover how power LED brightness variations in devices can be exploited through video footage to extract cryptographic keys, with demonstrations using smartcard readers and USB speakers.
Private Keys in Public Places - Finding and Exploiting Hidden Encryption Keys
Uncover techniques for finding hidden private keys, certificates, and encryption keys in firmware, with real-world examples from Netgear, Fortinet, and Dell's security vulnerabilities.
Retro Exploitation - Vintage Computing as a Vulnerability Research Playground
Explore vulnerability research and exploit development through vintage computing, focusing on the Commodore Amiga platform and practical demonstrations of retro software exploitation techniques.
Unlocking Hidden Powers in Xtensa-based Qualcomm WiFi Chips
Dive into firmware modification techniques for Xtensa-based Qualcomm WiFi chips, exploring architecture, patching methods, and security research possibilities using the Nexmon framework.
Revolutionizing ELF Binary Patching with Shiva - Advanced Techniques and Solutions
Discover revolutionary ELF binary patching with Shiva - a JIT system enabling developers to write complex patches in C code, transforming how we maintain and secure legacy software without source code access.
Malware Design: Abusing Legacy Microsoft Transports and Session Architecture
Explore advanced malware design techniques and covert communication frameworks, focusing on Windows architecture exploitation and maintaining persistent access while evading detection systems.
WINE Pairing with Malware - Using Linux Tools for Malware Analysis
Discover how to leverage WINE and Linux tools for malware analysis, extracting forensic evidence, and testing offensive security techniques without expensive sandboxes.
Leveraging macOS Networking Frameworks to Heuristically Detect Malware
Discover advanced techniques for detecting macOS malware through network monitoring, exploring low-level APIs, private frameworks, and user-mode extensions for comprehensive threat detection.
Unlocking Doors Through Long-Range Relay Attacks on Contactless Credentials
Discover how to execute long-range relay attacks on contactless credentials through ISO 14443A protocol vulnerabilities, including live demonstrations and practical mitigation strategies.
Exploiting Wireless Side Channels in EV Charging Systems - Security Vulnerabilities in CCS and NACS
Explore wireless security vulnerabilities in EV charging systems, focusing on CCS technology, eavesdropping risks, and potential attack vectors through power-line communication signals.
Vacuum Robot Security and Privacy: Preventing Data Collection from Smart Home Devices
Explore security vulnerabilities in smart vacuum robots and learn practical techniques to protect your privacy while maintaining control over these AI-enabled devices.
Pwning the Pwners with Mindware - Using Cyberpsychology and AI for Defensive Strategy
Discover how cyberpsychology and AI can empower defenders to exploit human vulnerabilities in cyber attacks, turning defense into an offensive advantage through psychological tactics.
Spooky Authentication at a Distance - Post-exploitation Techniques for Windows Environments
Discover innovative post-exploitation techniques for proxying Windows authentication protocols remotely, enabling user impersonation and domain control without elevated privileges.
The Coming War on Encryption - Part 3
Explore current legislative threats to encryption, focusing on Senate proposals, FBI initiatives, and global efforts to undermine secure messaging under the pretext of fighting exploitation.