Forging the USB Armory - An Open Source Secure Flash-Drive-Sized Computer
Explore the creation of a secure, open-source computer the size of a flash drive. Learn about innovative hardware design and advanced security features for portable computing.
The Power of Pair - One Template that Reveals 100+ UAF IE Vulnerabilities
Discover a unique fuzzing strategy that revealed over 100 IE use-after-free vulnerabilities. Learn about the vulnerability hunting system and techniques used to find critical browser security flaws.
How to Find Bugs in USB Device Drivers
Explore USB device driver vulnerabilities using vUSBf framework. Learn about fuzzing techniques, bug detection, and potential security risks in USB implementations across various operating systems.
Computrace Backdoor Revisited
Exposición de vulnerabilidades en software antirrobo Computrace, demostrando fallos de seguridad y posibles ataques. Incluye análisis del protocolo, comportamiento sospechoso y métodos de detección/desactivación.
Emanate Like A Boss - Generalized Covert Data Exfiltration With Funtenna
Explore Funtenna, a software technique for covert data exfiltration through electromagnetic emanations in various computing devices, including its mechanisms, implementations, and implications for network security.
Ret2dir - Deconstructing Kernel Isolation
Explore kernel exploitation technique ret2dir, bypassing isolation protections by leveraging direct-mapped memory. Learn about vulnerabilities, attack models, and mitigation strategies for Linux kernels.
WebKit Everywhere - Secure or Not?
Explore WebKit security, vulnerabilities, and exploitation techniques across platforms. Learn about security enhancements, mitigation strategies, and advanced exploit methods with real-world demos.
Abusing Silent Mitigations - Understanding Weaknesses Within Internet Explorer
Explore Internet Explorer's silent exploit mitigations, their weaknesses, and potential attack vectors. Learn techniques to bypass these security measures and gain insights into hardening browser defenses.
Unicorn - Next Generation CPU Emulator Framework
Versatile CPU emulator framework supporting multiple architectures and platforms. Offers clean API, thread-safety, and language bindings for building advanced security tools and research.
Understanding and Managing Entropy Usage
Explore cryptographic entropy usage, sources, and management across systems. Learn to analyze and improve random number generation for enhanced security in modern IT infrastructures.
Everything Is Awful - And You're Not Helping
Humorous exploration of security failures and cynicism in the tech industry, highlighting common pitfalls and the challenges of creating truly secure systems.
Honeypots for Active Defense
Explore active defense strategies using honeypots. Learn about various honeypot types, implementation techniques, and tools for enhancing network security and threat intelligence.
Knowing the Unfuzzed and Finding Bugs with Coverage Analysis
Explore automated coverage analysis for efficient fuzzing, using bncov plugin for Binary Ninja to identify prime fuzz targets and uncover hidden vulnerabilities in software.
Post-Quantum Crypto - Today’s Defense Against Tomorrow’s Quantum Hacker
Overview of post-quantum cryptography and its practical applications in securing today's data against future quantum threats. Includes lessons from real-world integrations and demonstrations of quantum-safe alternatives.
Linux Secure Boot
Erfahrungen und Konzepte zur Implementierung von Secure Boot auf Linux-Systemen, um Schadsoftware und manipulierte Betriebssysteme zu verhindern.
Understanding the Prevailing Security Vulnerabilities in TrustZone-Assisted TEE Systems
Comprehensive analysis of security vulnerabilities in TrustZone-assisted Trusted Execution Environments, exploring architecture issues, implementation bugs, and hardware flaws across popular TEE systems. Offers insights for improving TEE security.
The Code That Never Ran - Modeling Attacks on Speculative Evaluation
Modeling speculative evaluation attacks like Spectre using pomsets. Proposes abstract model to express known attacks, verify countermeasures, and predict new compiler optimization-based vulnerabilities.
Understanding the Security of ARM Debugging Features
Comprehensive analysis of ARM debugging features' security implications across various platforms, exposing vulnerabilities and demonstrating the Nailgun attack to highlight potential risks.
The Invasion of Bad Drivers
Explore vulnerabilities in peripheral drivers, including a 0day discovery, exploitation techniques, and mitigation strategies. Learn about common security risks and how to protect your system.
Grand Pwning Unit - Accelerating Microarchitectural Attacks with the GPU
Explores how integrated GPUs can accelerate microarchitectural attacks, bypassing mitigations and compromising mobile browsers. Demonstrates novel reverse engineering techniques for GPU cache architecture.
Hardware-Enforcement of Walther-Recursive Program Functions
Explore hardware-enforced restrictions on computational complexity using JIT compilation and Intel's Processor Tracing to improve security through limited return-oriented programming.