Changing the Colors of Your Keyboard Might Lead to Privilege Escalation
Uncover how gaming keyboard software can lead to kernel vulnerabilities, exploring real-world exploits and discussing future implications for Linux kernel security.
Chop Suey - An Exceptional Dish With A Side Of Buffer Overflows
Explore buffer overflow vulnerabilities in exception handling, uncovering a new exploitation technique and its real-world implications for software security.
Securing the Road to Autonomy
Expert panel discusses challenges and strategies for securing autonomous vehicles, addressing cybersecurity risks and safety concerns in the evolving automotive industry.
In-Secure Remote Operations - What Sucks, Rocks, and a Super-CLI
Explore secure remote operations, analyzing pros and cons of jump server architectures, role-based shells, and PowerShell limitations. Includes new research on full token hijacking from network logon sessions without hashes or TGTs.
Not So Famous Attack Vectors in the World of Smart Contract Security
Explore lesser-known smart contract vulnerabilities, bad coding patterns, and defensive strategies. Learn to identify and protect against overlooked attack vectors in blockchain security.
Critical Infrastructure – It’s Not All About Power - Panel Discussion
Expert panel explores diverse aspects of critical infrastructure beyond power systems, discussing cybersecurity challenges and resilience strategies for essential services and networks.
Why I Write My Own Security Tooling and Why You Should Too
Discover the benefits of creating custom security tools for research. Learn how this approach enhances understanding, improves vulnerability detection, and ultimately makes you a more effective security researcher.
Dirty Stream Attack - Turning Android Share Targets To Attack Vectors
Explore Android's vulnerability to Dirty Stream Attacks, where malicious apps exploit file-sharing intents to compromise target applications. Learn detection methods and security measures.
The Road to Side-Channel Regression Testing in CI Development
Explore integrating side-channel regression testing into CI development, with practical demonstrations and insights on implementing countermeasures for sample attacks.
Server Side Prototype Pollution - Blackbox Detection Without The DoS
Innovative techniques for detecting server-side prototype pollution without causing DoS, including a Burp extension for blackbox testing and identifying JavaScript engines through crafted requests.
Hacking Fintech Crime Realities & Possibilities
Insights into tackling cybercrime targeting fintech platforms in India, exploring hacking techniques, law enforcement challenges, and potential countermeasures to protect the digital economy.
Web 3.0 Smart Contracts Could Be Leaky
Explore the challenges and solutions in writing secure smart contracts for Web 3.0, including preventing sensitive information leaks and deploying to decentralized servers.
Honey I Just Put The Hospital On A Ventilator
Explore DICOM file vulnerabilities in healthcare and learn about an entropy-based detection technique to identify malicious files, with demonstrations of attacks and protective solutions for Linux and Windows.
Hacking Android Foreground Services Escalation Of Privileges
Explore Android foreground services vulnerabilities, including a race condition bug and its patch bypass, demonstrating potential escalation of privileges and security implications.
Jailbreaking iOS in the Post-Apocalyptic Era
Exploración detallada del jailbreak en iOS, abordando desafíos de seguridad, técnicas de bypass y evolución de las medidas de Apple. Análisis profundo de sandbox, firma de código y mitigaciones de hardware/software.
Securing the Software
Expert panel discusses strategies and challenges in software security, offering insights for industry professionals and organizations to enhance their cybersecurity practices.
Automate Your Whatsapp Chats
Learn to automate WhatsApp chats on Android using Accessibility Services. Discover how to create a sample app, explore potential security risks, and gain insights into automating various Android functions.
0Day Up Your Sleeve - Attacking macOS Environments
Comprehensive guide to macOS security vulnerabilities, including live demonstration of 0-day exploit, post-exploitation techniques, and hardening recommendations for Mac infrastructures.
Does Your SOC Suck?
Panel discussion on optimizing Security Operations Centers (SOCs), covering best practices, challenges, and innovative approaches to enhance cybersecurity monitoring and response capabilities.
Hacking 5G Is No Rocket Science
Explore API attacks in 4G/5G IoT networks, revealing vulnerabilities and discrepancies between security standards and real-world implementations. Learn about potential threats and defense strategies for mobile IoT infrastructure.
Securing India - The CERT-In Way
Panel discussion on CERT-IN's notification for reporting security breaches, emphasizing timely incident reporting, organizational awareness, and citizen precautions to enhance India's cybersecurity posture.