Don't Trust the NIC - Attacking Windows NDIS Drivers
Exploración de vulnerabilidades en controladores NDIS de Windows, demostrando ataques y problemas de seguridad en implementaciones de proveedores, incluyendo Microsoft.
Insecurity of E-Voting in Brazil
Análisis de vulnerabilidades en el sistema de voto electrónico brasileño, escenarios de fraude electoral y propuestas para mejorar la seguridad. Incluye verificación crowdsourcing de resultados y perspectivas futuras.
Tell How You Attack and I Will Tell You Who You Are
Explore attacker profiling through analysis of attack methods, uncovering insights into cybercriminal identities and motivations. Learn techniques for understanding and predicting adversary behavior.
Ret2page - The Art of Exploiting Use-After-Free Vulnerabilities in the Dedicated Cache
Explore a new exploitation technique for Use-After-Free vulnerabilities, focusing on SLUB and BUDDY allocators to improve efficiency and success rates in physical page reuse and Android rooting.
Monitoring Surveillance Vendors - A Deep Dive into In-the-Wild Android Full Chains in 2021
Explore in-the-wild Android exploits discovered by Google's TAG and Android Security teams, including deep dives into CVE-2021-0920 and novel kernel exploitation techniques for bypassing hardware mitigations.
Unlimited Results - Breaking Firmware Encryption of ESP32-V3
Unveiling vulnerabilities in ESP32-V3 microcontrollers through hardware security evaluation, focusing on extracting firmware encryption keys to decrypt flash content containing potential secret data.
You Wouldn't Share a Syringe. Would You Share a USB Port?
Explore USB security vulnerabilities, device emulation, and exploitation techniques across operating systems. Learn to identify and mitigate risks associated with USB ports and devices.
Hardware Root of Mistrust
Explore hardware security vulnerabilities and potential exploits in this technical deep dive, uncovering the hidden risks in modern computing systems.
How to Measure Your Security
Discover techniques to measure and compare the effectiveness of security tools, holding vendors accountable. Learn to evaluate IDS, IPS, A/V, and other detection systems for better cybersecurity decision-making.
Not Yet Another Fuzzer
Explore NYAF, a multi-platform fuzzer using emulation and Generation Search algorithm for improved analysis of IOT devices, embedded systems, and firmware. Learn about its advantages in scalability and efficiency.
HAL - The Open-Source Hardware Analyzer
Einführung in Hardware-Reverse-Engineering und Vorstellung von HAL, dem ersten Open-Source-Framework zur Analyse von Netzlisten für die Erkennung von Hardware-Manipulationen und Backdoors.
A Systematic Evaluation of OpenBSD's Mitigations
Systematic evaluation of OpenBSD's security mitigations, analyzing effectiveness, performance impact, and potential bypasses. Provides rational assessment of the operating system's security claims.
Viva la Vita Vida
Detailing hardware and software hacking techniques used to breach the PlayStation Vita's security, including reverse engineering, fault injection, and side-channel analysis on its proprietary architecture.
Modchips of the State
Explore hardware implants in supply-chain attacks, their feasibility, and potential countermeasures. Examine a proof-of-concept SPI bus implant and discuss methods to detect and mitigate such security threats.
Wallet.fail
Comprehensive analysis of security vulnerabilities in popular cryptocurrency hardware wallets, demonstrating architectural, physical, and software flaws through live hacking demonstrations and detailed explanations.
TrustZone-M - Breaking ARMv8-M's Security
Exploring hardware attacks on ARM Cortex-M processors, demonstrating vulnerabilities in security features like TrustZone-M. Includes open-source tools for fault-injection testing and real-world examples of bypassing chip security measures.
Open Source is Insufficient to Solve Trust Problems in Hardware
Exploring hardware trust issues, supply chain vulnerabilities, and potential solutions. Introduces Betrusted, an open-source platform aiming to enhance security for high-risk individuals.
Leaving Legacy Behind - Deutsche Übersetzung
Reduzierung des CO2-Fußabdrucks von Netzwerkdiensten durch MirageOS-Unikernels: Minimalistischer Ansatz für sichere Services mit OCaml, kleinen Bibliotheken und geringerem Ressourcenverbrauch.
Leaving Legacy Behind
Reducing carbon footprint and enhancing security of network services using MirageOS unikernels. Explores minimalist approach with OCaml, showcasing various applications and deployment strategies for efficient, secure digital infrastructure.
Dissecting the AMD Platform Security Processor
Explore AMD's Platform Security Processor: its role in system startup, runtime services, and memory access. Gain insights into reverse-engineering efforts and potential security implications.
Einführung in OpenBSD
Entdecken Sie OpenBSD: Ein sicheres Unix-Betriebssystem mit einzigartigen Funktionen. Erfahren Sie mehr über seine Geschichte, Versionen und Sicherheitsmerkmale in dieser umfassenden Einführung.