HookChain: A New Perspective for Bypassing EDR Solutions
Discover a sophisticated EDR bypass technique combining IAT Hooking, dynamic SSN resolution, and indirect system calls to redirect Windows subsystem execution flow while remaining undetected by traditional security measures.
Beginner's Guide to Hacking IoT Devices - Building Your First IoT Security Testing Lab
Discover practical IoT hacking techniques, from selecting beginner-friendly devices to building an affordable toolkit under $100. Learn common vulnerabilities and methods to gain device access using simple tools and tactics.
Incubated ML Exploits: Backdooring Machine Learning Pipelines with Input Handling Bugs
Explore machine learning pipeline vulnerabilities and learn to identify, exploit, and defend against model backdoors through input handling bugs and systematic security approaches.
Hacker vs AI Perspectives in National Security and Cyber Warfare
Explore AI's role in national security through an ex-spy's lens, blending pop culture references with real-world cybersecurity insights and interactive demonstrations of AI systems.
Exploiting Bluetooth Vulnerabilities: From Car Systems to Bank Account Security
Discover how to identify and exploit Bluetooth vulnerabilities in modern vehicles and flight systems, using BlueToolkit framework for testing, with practical tips and new attack vectors for security research.
Nano Enigma: Uncovering the Secrets in eFuse Memories
Dive into the fascinating world of eFuse memory security, exploring physical extraction techniques from basic decapsulation to advanced SEM analysis for accessing encrypted data storage.
Early Microprocessors and the 6502: A Historical and Technical Introduction
Explore the fascinating history of early microprocessors, focusing on the 6502 chip, its programming, and impact on vintage computing systems, with hands-on demonstrations and resources.
AMD Sinkclose - Universal Ring2 Privilege Escalation in System Management Mode
Delve into AMD processor security vulnerabilities, exploring System Management Mode (SMM), CPU design flaws, and the methodology behind ring-2 privilege escalation exploits.
Unsaflok - Hacking Millions of Hotel Locks and Electronic Access Control Systems
Discover critical vulnerabilities in dormakaba Saflok hotel locks, including key card forgery techniques, security implications, and how to verify if your room's lock has been patched for protection.
Ethical and Secure AI Vulnerability Disclosure - Challenges and Best Practices
Explore the complexities of AI vulnerability disclosure, focusing on ethical challenges, bias management, and security implications while examining real-world cases and solutions for responsible reporting.
Exploiting the Unexploitable - Advanced JavaScript Vulnerability Chains in Kibana
Dive into advanced exploitation techniques for JavaScript vulnerabilities, focusing on Prototype Pollution attacks and RCE chains through real-world Kibana Bug Bounty examples and defense strategies.
Using ALPC Security Features to Compromise RPC Services
Dive into Windows kernel security through ALPC and RPC services, exploring vulnerability exploitation techniques, security bypass methods, and system privilege escalation strategies.
Transforming Application Security: Protecting Everything as Code
Explore modern application security challenges and solutions in cloud-native environments, from threat modeling to real-time detection, with emphasis on securing 'everything as code' ecosystems.
Encrypted Newspaper Ads in The Times: The Collinson Arctic Expedition Communication System (1850-1855)
Uncover the fascinating story of encrypted 1850s newspaper ads used to communicate with an Arctic explorer, their eventual decryption, and the innovative worldwide communication system they represented.
Creating Custom Electronic Conference Badges - A Guide to OpenTaxus Design
Learn to design and customize electronic conference badges using OpenTaxus - from hardware modifications in KiCAD to software changes in CircuitPython, plus cost management and production logistics.
Regenerating Passwords from RoboForm's Password Generator - A Time-Based Attack
Delve into reverse engineering RoboForm's password generator vulnerability, exploring techniques to regenerate historical passwords and recover locked Bitcoin wallets through systematic analysis.
Ethical and Secure AI Vulnerability Disclosure - Challenges and Best Practices
Explore the complexities of AI vulnerability disclosure, examining ethical challenges, bias concerns, and security implications while learning practical approaches to responsible vulnerability management.
Measuring the Tor Network - Understanding Network Health and Security Analysis
Dive into the mechanics of Tor's network infrastructure, exploring metrics collection, attack mitigation, and community management strategies for maintaining this vital privacy ecosystem.
The Missing Link: How to Collect and Leverage Software Bill of Materials (SBOMs)
Discover how Schneider Electric efficiently manages software security through SBOM collection and implementation, with real-world examples from Log4j and OpenSSL vulnerability responses.
MobileMesh RF Network Exploitation - Security Analysis and Vulnerabilities in goTenna Networks
Uncover security vulnerabilities in goTenna Pro radio's mesh network encryption, including tracking, interception, and message injection methods, with practical demonstrations and mitigation strategies.
Leveraging Private APNs for Mobile Network Traffic Analysis and Security
Discover how to monitor and control mobile device network traffic using private APNs, enabling affordable security testing and traffic analysis for IoT and mobile devices on 4G/5G networks.