An ACE Up The Sleeve - Designing Security Descriptor Based Backdoors
Explore advanced Active Directory security techniques, focusing on designing backdoors using security descriptors. Learn about access control, security reference monitors, and stealth primitives.
The Language of Security - Sharing Knowledge without Spreading FUD
Explore effective security communication strategies to share knowledge without fear-mongering. Learn to balance technical accuracy with accessible language for diverse audiences.
No Royal Road - Advanced Analysis for 'Advanced' Threats
Explore advanced threat analysis techniques, political implications, and attribution challenges in cybersecurity. Gain insights on balancing technical and policy approaches to combat sophisticated attacks.
Security Appliances Internals
Explore the inner workings of security appliances, their architecture, and implementation. Gain insights into cloud security and key takeaways for effective defense strategies.
All Your Cloud Are Belong To Us - Hunting Compromise in Azure
Explore techniques for identifying and mitigating compromises in Azure cloud environments, focusing on network security, threat detection, and best practices for cloud security.
Real-Life Network and Security Automation
Explore network and security automation strategies, from latency monitoring to firewall deployment, with insights on custom scripts, proactive maintenance, and reducing deployment time.
The Wolf in SGX Clothing
Explore Intel SGX's security features, requirements, and potential vulnerabilities through demos, code analysis, and practical examples. Gain insights into enclave protection and potential attack vectors.
Ads Networks Are Following You, Follow Them Back
Explore how ad networks track users and learn techniques to monitor and analyze their behavior, including tools like ET Toolkit and HTTP Bloom for enhanced web privacy.
Unifying RF Fuzzing Techniques under a Common API - Introducing unfAPI
Explore unified RF fuzzing techniques with a common API, enhancing wireless security testing across various protocols and standards.
When Virtual Hell Freezes Over - Reversing C++ Code
Explore advanced C++ code reversing techniques, focusing on dynamic object creation, vtables, and multiple inheritance. Learn automated methods for efficient analysis.
Hunting Android Malware - A Novel Runtime Technique for Identifying Malicious Applications
Novel runtime technique for identifying malicious Android apps through instrumentation, addressing frustrations with static analysis and offering practical demonstrations and insights.
Samsung Pay Tokenized Numbers, Flaws and Issues
Explore Samsung Pay's tokenization, security flaws, and potential vulnerabilities in offline mode. Learn about token expiration, social engineering risks, and real-time attack scenarios.
Witness the Russian Attack - Live Demos of Their Steps, Tools, Techniques
Explore Russian cyberattack techniques through live demonstrations, covering infection methods, web injects, traffic manipulation, and victim targeting strategies.
Medical Device Security - Hack or Hype
Explore medical device security, FDA guidelines, and real-world vulnerabilities. Learn about safety vs. security, continuous measurement, and industry challenges in this comprehensive overview.
How to Implement an SDL in a Large Company
Learn to implement a Secure Development Lifecycle in large organizations, covering change management, coding guidelines, security tools, and review processes. Gain insights from Bosch's experience and best practices.
Passive Intelligence Gathering Analytics
Explore passive intelligence gathering techniques, open-source intelligence, and data analysis using Just-Metadata. Learn to identify threats and enhance cybersecurity through practical tools and methodologies.
Attacking Nextgen Firewalls
Explore techniques for attacking next-generation firewalls, focusing on administrative interfaces, embedded systems, and potential vulnerabilities in security features like VPNs and user authentication.
Reverse Engineering a Digital Two-Way Radio
Explore digital two-way radio reverse engineering, covering bootloader dumps, firmware patching, and USB analysis for the Tytera MD380 device.
Patch Me If You Can
Learn about man-in-the-middle attacks, software package integrity, and TLS handshakes. Explore proof of concept, security issues, and practical demonstrations.
Offensive Active Directory with PowerShell
Learn offensive techniques for Active Directory using PowerShell, covering user hunting, enumeration, GPO abuse, trust exploitation, and more. Gain practical skills for penetration testing and security assessments.
Attacking & Protecting Big Data Environments
Explore techniques for securing and attacking big data environments, focusing on OOP, code execution, and security measures in distributed systems.