Exploits in Wetware
Exploits in wetware: social engineering techniques, OSINT strategies, and defensive measures against human vulnerabilities in cybersecurity, based on real-world experiences.
One Step Before Game Hackers - Instrumenting Android Emulators
Explore native hooking on Android emulators, understanding process start routines and emulation strategies. Learn why existing frameworks fail and how to create one that works for game cheating.
Data Breaches - Barbarians in the Throne Room
Analyze hundreds of data breach disclosures to understand common vulnerabilities, focusing on preventable issues like patching and configuration failures, and their impact on enterprises.
Prototype Pollution Attacks in NodeJS Applications
Explore prototype pollution attacks in NodeJS, including APIs vulnerable to pollution, potential impacts, and defensive strategies. Learn from real-world examples and security research findings.
The Blackbear Project
Explore a modified OpenSSH daemon that enhances post-exploitation capabilities, bypasses network restrictions, and provides reliable interactive shell access for penetration testing and security research.
Evading Vulnerability Exploitation Through Secure Android Development
Explore Android security challenges, common attack vectors, and best practices for secure development. Learn to protect consumers from evolving mobile threats.
Abusing Webhooks for Command and Control
Explore techniques for establishing covert command and control communication using webhooks, bypassing strict network defenses and avoiding detection in penetration testing scenarios.
Backslash Powered Scanning - Implementing Human Intuition
Innovative web scanner using intuitive techniques to detect injection vulnerabilities, offering WAF evasion, minimal network footprint, and adaptability to input filtering. Explores advanced exploitation methods and handles complex findings.
Don't Kill My Cat
Evade antivirus and security layers with polyglot files and assembly obfuscation. Learn to create undetectable payloads for penetration testing using a versatile tool.
Hacking POS Systems
Explore PoS system vulnerabilities, from physical access to data extraction. Learn about kiosk breakouts, privilege escalation, and real-world examples of critical security flaws in hotel management platforms.
Data Science Tools and Techniques for the Blue Team
Explore data science tools and techniques for cybersecurity, including statistical analysis and machine learning, to enhance threat detection and defense capabilities in large-scale corporate environments.
How Surveillance Law was Expanded in Canada - What the Media has Reported - What’s Next
Explore Canada's expanded surveillance laws, media coverage, court cases, and future implications for cybercrime investigations and individual privacy rights.
Practical Uses of Program Analysis - Automatic Exploit Generation
Explore automatic exploit generation through program analysis techniques, including instrumentation and symbolic execution, with practical demonstrations and tool insights.
Inter VM Data Exfiltration - The Art of Cache Timing Covert Channel on x86 Multi-Core
Explore cache timing covert channels in x86 multi-core systems, learning techniques for inter-VM data exfiltration and reverse shell establishment using shared resources and architecture imperfections.
Privacy, Surveillance & Oversight
Explore privacy, surveillance, and oversight in the digital age, examining historical context, legal frameworks, and democratic principles shaping modern data collection practices.
NorthSec 2015 - Jean Francois Cloutier & Francois Gagnon - CHEKS
Explore the science and technology behind the Chaotic Encryption Key System (CHEKS), including its concept, implementation, and practical application in a basic chat demo.
Threat Modeling for the Gaming Industry
Explore gaming industry security challenges, focusing on client-side logic, network protocols, account management, and untrusted platforms to enhance overall security and user experience.
OO RE with HexraysCodeXplorer
Explore object-oriented reverse engineering techniques for modern malware analysis, focusing on C++ code reconstruction and tools like HexRaysCodeXplorer for tackling complex malware frameworks.
Hopping on the CAN Bus
Learn to hack your car's CAN bus using an open-source toolkit. Explore CAN basics, attack methods, hardware/software tools, diagnostic protocols, and security implications for modern vehicles.
State of DNS Rebinding - Attack & Prevention Techniques and the Singularity of Origin
Explore DNS rebinding attacks, prevention techniques, and the concept of origin singularity. Learn about query analysis, protection bypasses, and practical defense strategies against this web security threat.
SSO Wars - The Token Menace
Explore SSO vulnerabilities, focusing on JWT and SAML tokens. Learn attack vectors, signature verification issues, and real-world implications for frameworks like WCF and SharePoint.