Queer Privacy & Building Consensual Systems
Exploring privacy challenges faced by marginalized communities through real stories, highlighting the need for inclusive, safer tools and systems that protect vulnerable individuals.
Snuffleupagus - Killing Bugclasses in PHP 7, Virtual-Patching the Rest
Explore Snuffleupagus, an open-source PHP security module that kills bug classes, implements virtual-patching, and enhances protection against vulnerabilities without modifying application code.
When Crypto Fails
Exploring real-world cryptographic failures in malware, this talk offers insights into identifying and potentially exploiting these vulnerabilities, with practical examples and a useful triage tool.
WiFi Exploitation - How Passive Interception Leads to Active Exploitation
Explore WiFi exploitation techniques, from passive interception to active attacks. Learn about device profiling, rogue access points, and MitM attacks. Includes demonstration of a new sensor framework for visualizing 802.11 data.
House Intercoms Attacks - When Frontdoors Become Backdoors
Explores vulnerabilities in modern building intercoms, demonstrating practical attacks and security risks associated with connected entry systems. Highlights potential backdoors and recommends security measures for M2M solutions.
Interesting Malware - No, I’m Not Kidding
Explore the intriguing CheshireCat malware family, its unique traits, and stealth tactics. Learn about its decade-long operation, retro coding style, and functional obfuscation techniques.
Where Should I Host My Malware?
Explore IoT vulnerabilities, focusing on FTP services in routers and NAS devices. Learn about ScanR framework, malware analysis, and protective measures against these widespread threats.
Bootstrapping an Architectural Research Platform
Explore x86 architecture research, covering CPU privileges, hypervisors, and emerging technologies. Learn to focus on research questions by understanding fundamental architectural concepts.
Credential Assessment - Mapping Privilege Escalation at Scale
Explore privilege escalation techniques in large-scale breaches and learn how to identify and combat credential exposure using a comprehensive framework for both offensive and defensive purposes.
Machine Duping - Pwning Deep Learning Systems
Explore vulnerabilities in deep learning systems and learn techniques to manipulate image recognition, speech recognition, and phishing detection through practical demonstrations and attack methodologies.
A Network of Sorrows - Small Adversaries and Small Allies
Exploring the impact of everyday security threats on ordinary people and advocating for user empowerment to build a safer internet through knowledge sharing and community support.
The Infosec Crossroads
Exploración de la evolución de ataques y defensas en ciberseguridad, abogando por un cambio hacia estrategias de defensa proactivas y basadas en inteligencia para superar las limitaciones de los enfoques reactivos actuales.
Exploit Generation and JavaScript Analysis Automation with WinDBG
Automate exploit generation and JavaScript analysis with WinDBG. Learn techniques for creating exploits from PoC crashes and tracking obfuscated JavaScript without triggering anti-debugging measures.
The Metabrik Platform - Rapid Development of Reusable Security Tools
Explore the Metabrik Platform for rapid security tool development. Learn to create reusable components, improve existing tools, and solve complex security challenges efficiently.
Cyber Grand Shellphish - Shellphish and the DARPA Cyber Grand Challenge
Explore autonomous hacking with Mechanical Phish, a system for automatic bug detection, exploit creation, and binary patching. Learn about its design, challenges, and implementation in the DARPA Cyber Grand Challenge.
Unveiling the Attack Chain of Russian-Speaking Cybercriminals
Unveiling the sophisticated attack chain of Russian-speaking cybercriminals, detailing their infrastructure, techniques, and resources accumulated since 2007, including billions of compromised emails and millions of infected servers.
Secrets in Soft Token - A Security Study of HID Global Soft Token
Unveiling vulnerabilities in HID Global Soft Token's Android app, exploring cryptographic weaknesses that could allow attackers to clone configurations and potentially discover user PINs through brute force.
Stressed Out - Denial of Service Attacks from the Providers’ Perspective
Exploring the world of 'booter' services: their users, providers, and impact on online gaming. Insights into cybercrime pathways and the motivations behind denial of service attacks.
Handling of Security Requirements in Software Development Lifecycle
Explore handling security requirements throughout software development, covering scalability, use cases, and practical demonstrations with insights on data protection and integration.
How to Keep Your Secrets Safe - Alternatives to 'Just Don't' on an Android Device
Explore Android security techniques for safeguarding secrets, from authentication to key management. Learn practical approaches to enhance app security and protect sensitive data.
How to Efficiently Protect AD from Credential Theft & Compromise
Learn efficient strategies to protect Active Directory from credential theft and compromise, focusing on authentication, attack methods, and mitigation techniques.