Behaviors and Patterns of Rogue Hosting Providers
Exploration of rogue hosting providers' behaviors, patterns, and impact on cybercrime. Insights into threat intelligence techniques for identifying and combating abusive hosting services, with focus on Dutch infrastructure.
Radio Exploitation 101
Explore radio exploitation fundamentals, wireless attack types, and live demos. Learn to bridge IP network skills to wireless domain, understanding mechanics and awareness of radio-based network vulnerabilities.
Neuralfuzz - Neural Networks for Fuzzing Web Apps
Explore neural network-based fuzzing for web apps, enhancing coverage and efficiency in identifying vulnerabilities through machine learning and intelligent payload generation.
XFLTReaT - A New Dimension In Tunnelling
XFLTReaT: An open-source tunnelling framework for bypassing network restrictions. Simplifies development of custom tunnels, supports various protocols, and offers easy configuration and use for network professionals.
Get to the Money - Hacking PoS and PoP Systems
Exploración detallada de vulnerabilidades en sistemas de punto de venta, demostrando vectores de ataque y discutiendo la seguridad de sistemas POS modernos, con énfasis en SAP POS.
More Libraries! More Vulnerabilities! More Things! Now with Real World Case Studies
Explore real-world case studies on library vulnerabilities, their impact, and mitigation strategies. Gain insights into security challenges and learn about industry responses and financial implications.
Man in the Binder - He Who Controls IPC, Controls the Droid
Explore Android's Binder IPC mechanism and its security implications, including potential vulnerabilities in keylogging and banking apps.
Sensor Security
Explore sensor vulnerabilities in IoT devices, autonomous systems, and AI, covering attack vectors, security challenges, and potential solutions for the Internet of Everything era.
A Year in the Red
Explore advanced red team tactics, including domain fronting, ADFS attacks, and sandbox evasion. Gain insights into offensive and defensive strategies for the coming year.
Spy Vs Spy - A Modern Study Of Microphone Bugs
Investigación detallada sobre micrófonos ocultos modernos, sus características y métodos de detección, con experimentos prácticos y desarrollo de una herramienta de código abierto basada en SDR para detectarlos.
200+ Vulnerabilities in Android Phones
Revealing 200+ vulnerabilities in Samsung Android phones, focusing on authentication bypass and system crashes. Demonstrates fragmentation issues and compares with Google's AOSP, offering insights into Android security.
Unstructured Data Is the New Gold - ML + NLP Is the New Shiz
Explore machine learning and natural language processing for cybersecurity intelligence, leveraging unstructured data from social media and online sources to gain an edge in threat identification.
Stealing PLC Intellectual Property - A Red Teaming Story
Exploring a real-world Red Team operation to steal industrial recipes from PLCs, detailing preparation, physical intrusion, and ICS device hacking techniques in manufacturing environments.
Searching for a Needle in a Remote Haystack
Challenges in cyberattack investigation and a novel open-source solution for remote digital forensic analysis, featuring a live demo of analyzing a complex infection on a remote machine.
Insecurity in 2017 - 0 Days Are the Least of Our Problems
Exploring the cyclical nature of cybersecurity threats, this talk emphasizes the importance of basic security practices over obsession with zero-day vulnerabilities, using recent events as examples.
Hadoop Safari - Hunting for Vulnerabilities
Explore Hadoop security vulnerabilities and attack vectors in Big Data environments. Learn practical techniques to access data lakes and exploit weaknesses in cluster infrastructures.
Hacking Medical Devices and Healthcare Infrastructure
Explore healthcare cybersecurity, focusing on HL7 protocol vulnerabilities in medical devices and hospital systems. Learn to identify and exploit weaknesses in healthcare infrastructure.
Bootstrapping Systems With Open Source Firmware
Explore open-source firmware for enhanced physical security and data protection. Learn about Heads, a custom firmware and OS configuration that combines hardware hardening with secure boot processes.
In Depth Analysis of Multicast DNS and DNS Service Discovery
Análisis profundo de los protocolos mDNS y DNS-SD, explorando sus vulnerabilidades inherentes y posibles vectores de ataque en entornos de red de configuración cero.
A Surprise Encounter With a Telco APT
Exposé of a sophisticated telco hack, revealing methodologies, tools, and protocols used by a suspected state actor. Insights from a live session observation and forensic analysis of a mobile network operator intrusion.
Drammer - The Making Of
Exploración técnica del ataque Drammer, que aprovecha la vulnerabilidad Rowhammer en dispositivos Android sin permisos de usuario ni fallas de software. Detalla el proceso de desarrollo y los desafíos enfrentados.