A New RISC
Exploring RISC-V: A new open-source processor architecture, its security attributes, potential vulnerabilities, and impact on computing platforms. Includes demonstrations of attacks and discussions on privilege models and future implications.
Low Cost Open Source Spectrum Monitoring
Explore low-cost open-source spectrum monitoring techniques using SDR platforms to detect unauthorized RF devices and secure wireless infrastructure. Learn about tools for analyzing and profiling signals in real-time.
Exploiting Windows Automatic Wireless Association
Exploiting Windows automatic wireless association with "Lure10" technique. Demonstrates man-in-the-middle attack using Wifiphisher tool. Discusses WiFi security, countermeasures, and protection strategies across operating systems.
Breaking Apple's iCloud Keychain
Discover techniques for accessing and analyzing data stored in Apple's iCloud, including synced information, backups, and keychain contents. Learn about vulnerabilities in two-factor authentication.
Fault Injection Attacks on Secure Boot
Exploring fault injection attacks on secure boot, this talk introduces techniques, impacts, and practical mitigation strategies for embedded systems security, with real-world examples and key takeaways.
iOS 10 Kernel Heap Revisited
Detailed exploration of iOS 10 kernel heap implementation, discussing Apple's counter-measures against exploitation techniques and potential attacker adaptations in iOS 9 and 10 beta versions.
Reverse Engineering Swift Applications
Exploring Swift app reverse engineering: class info extraction, Objective-C bridging, runtime manipulation, and function hooking for security professionals and pentesters.
Data Driven Software Security
Explore Microsoft's data-driven approach to software security, including new mitigation techniques in Windows 10 and analysis of real-world exploits to enhance protection against vulnerabilities.
Cache Side Channel Attacks - CPU Design As A Security Problem
Explore CPU cache vulnerabilities and side-channel attacks, their impact on security, and potential mitigations in modern computing environments like cloud and multi-user systems.
Forging a Wireless Time Signal to Attack NTP Servers
Forging wireless time signals to disrupt NTP servers and consumer devices. Explores vulnerabilities in radio timing services and demonstrates low-cost methods to spoof GPS, WWVB, and other signals used for time synchronization.
Go Speed Tracer - Guided Fuzzing
Explore advanced guided fuzzing techniques for vulnerability discovery, including code coverage analysis, constraint solving, and feedback mechanisms. Learn about novel tools and approaches in dynamic analysis.
Adaptive Android Kernel Live Patching
Adaptive Android kernel live patching framework for securing devices against vulnerabilities, enabling hotpatching without source code access and automatic adjustment to different models and versions.
Using the Observer Effect and Cyber Feng Shui - Jacob Torrey
Explore techniques for detecting system monitoring and creating secure environments. Learn about architectural "tells", physical unclonable functions, and strategies for evading analysis in computer systems.
Escape From The Docker KVM QEMU Machine
Explore Docker and KVM-QEMU escape techniques, vulnerabilities, and exploitation methods in cloud computing systems. Learn about container escape, QEMU device emulator flaws, and virtual machine escape strategies.
CSP Oddities
Explore Content Security Policy intricacies, common pitfalls, and innovative solutions. Learn to deploy effective CSP policies and discover potential vulnerabilities in web application security.
Kernel Exploit Hunting and Mitigation
Explore kernel exploit hunting and mitigation techniques, focusing on identifying and analyzing malware that leverages Windows kernel vulnerabilities for system compromise and evasion of security measures.
Hardsploit Project
Hardsploit: A comprehensive toolbox and framework for auditing electronic systems and embedded devices, addressing the growing security challenges in the Internet of Things era.
Anatomy of an APT Attack
Explore tactics of APT attacks, including state-sponsored hackers and organized crime. Learn about real-world compromises, remediation processes, and the global impact of cybercrime.
Hack in the Class
Innovative educational initiative for tech-savvy kids, creating a 'hacky classroom' to teach real tech subjects beyond traditional curricula, fostering young talent in hacking and coding.
Pentesting ChatOps
Explore ChatOps for penetration testing: streamline workflows, automate tasks, and enhance team collaboration using chatbots and custom scripts in a distributed environment.
Security Design and High Risk Users
Security design for high-risk users: understanding human outcomes, adversary capabilities, and synthesizing solutions. Explores challenges and practical processes for improving security beyond code and systems.