BMS Is Destroyed by "Smart Button"
Explore vulnerabilities in KNX automation systems for smart buildings. Learn how intruders can exploit weaknesses to conduct attacks, manipulate configurations, and compromise entire networks.
Introduction to IoT Reverse Engineering
Introduction to firmware reverse engineering for IoT devices, focusing on information gathering, emulation environment setup, and analysis techniques. Includes a practical example using a home router.
RHme3 Hacking Through Failure
Exploring hardware hacking failures during RHme3 CTF challenge: building rigs, writing code, and overcoming obstacles. Insights on learning from setbacks in cybersecurity competitions.
Using Machines to Exploit Machines
Explore machine learning for offensive research: automate crash analysis, determine exploitability, and accelerate bug triage. Discover AI-driven techniques to enhance vulnerability detection and exploitation processes.
You Try to Detect Mimikatz
Explore mimikatz's capabilities beyond credential collection, understand its power, and learn detection strategies for this persistent post-exploitation tool.
NFC Payments - The Art of Relay & Replay Attacks
Exploring vulnerabilities in NFC payment systems, focusing on relay and replay attacks. Discusses security challenges and potential bypasses of tokenization in digital transactions.
No Win32_Process Needed - Expanding the WMI Lateral Movement Arsenal
Explore advanced WMI lateral movement techniques beyond Win32_Process, expanding the arsenal for threat actors and enhancing defensive strategies against sophisticated attacks.
How to Bring HID Attacks to the Next Level
Exploring advanced HID attack techniques using WHID Injector and P4wnP1, including design insights, feature comparisons, and defensive strategies for Blue Teams to detect and mitigate these sophisticated threats.
The Past, Present & Future of Enterprise Security
Evolution of enterprise security: from traditional methods to automated attacks. Explores sophisticated tactics, tools, and techniques reshaping Active Directory vulnerabilities and domain privilege escalation.
The Bicho - An Advanced Car Backdoor Maker
Explore advanced car backdoor techniques using "The Bicho," surpassing Bluetooth limitations for enhanced attack range and effectiveness in connected vehicle security.
Hunting PBX for Vulnerabilities
Explore PBX vulnerabilities, their impact, and mitigation strategies. Learn about potential security threats and how to protect against them in various PBX systems.
To Serve Man - AI, Machine Learning & Deep Learning in Security
Explore AI, machine learning, and deep learning in cybersecurity through a lively debate. Experts discuss vendor claims, organizational readiness, and future implications, inviting audience participation.
The Insecure Software Development Lifecycle - How to Find, Fix, and Manage Deficiencies Within an Existing Methodology
Practical techniques for integrating security into existing software development methodologies, addressing deficiencies, and ensuring compliance throughout the SDLC.
Invoke-DOSfuscation - Techniques for S-level CMD Obfuscation
Explore advanced CMD obfuscation techniques used by threat actors, including string manipulation and encoding methods. Learn about new obfuscation approaches and their detection implications for cybersecurity professionals.
Mobile Operators vs. Hackers - New Security Measures for New Bypassing Techniques
Explore mobile network security measures and hackers' evolving techniques to bypass them. Learn about SMS Home Routing, signaling firewalls, and sophisticated attack methods in this insightful talk.
Silent Wire Hacking
Explore silent wire hacking techniques for undetected network intrusion through exposed RJ45 cables, bypassing link state detection and port blocking during red team attacks.
Building Systems on Shaky Grounds - 10 Tactics to Manage the Modern Supply Chain
Explore 10 tactics for managing modern software supply chains, balancing open-source benefits with security risks. Learn to assess vendors, conduct red team exercises, and implement effective incident response strategies.
Drones - The New Weapon of Choice - Also for Hackers
Explore drone-based threats, comprehensive assessment methodologies, and countermeasures. Learn about payload planting, communication tampering, insider threats, hacking risks, and privacy concerns in the evolving landscape of drone technology.
VentriLock - Exploring Voice-Based Authentication Systems
Exploring vulnerabilities in voice-based authentication systems, discussing signal processing techniques to bypass security measures, and analyzing the robustness of current implementations.
Popping a Shell on a Mainframe - Is That Even Possible
Explore mainframe security vulnerabilities and learn techniques for pentesting, deploying shells, and elevating privileges on MVS systems, starting from zero authentication.
25 Techniques to Gather Threat Intel & Track Actors
Discover 25 techniques for gathering threat intelligence and tracking actors, illustrated with 30 real-world cases. Learn about crimeware vulnerabilities, C&C misconfigurations, and underground marketplaces.