Overcoming Fear - Reversing With Radare2
Comprehensive guide to reversing with Radare2, covering installation, basic commands, visual modes, configuration, and practical applications. Suitable for beginners and professionals in computer security.
Duplicating Black Box Machine Learning Models
Exploración de técnicas avanzadas para duplicar modelos de aprendizaje automático de caja negra, destacando vulnerabilidades en servicios en la nube y proponiendo un nuevo método de ataque más eficiente.
Finding Vulnerabilities in iOS - MacOS Networking Code
Explore iOS/macOS networking vulnerabilities, focusing on mbuf processing in XNU kernel. Learn about network packet structures, vulnerability discovery techniques, and PoC exploit development.
TOCTOU Attacks Against Secure Boot and BootGuard
Explore TOCTOU attacks on Intel's BootGuard, learn about vulnerabilities in secure boot processes, and discover open-source tools for testing system security.
Hourglass Fuzz - A Quick Bug Hunting Method
Introducción a Hourglass Fuzz, un método rápido de búsqueda de errores para Android que supera las limitaciones de los sistemas de fuzzing típicos, con ejemplos de vulnerabilidades descubiertas en controladores gráficos y Bluetooth.
Hey Attacker! I Can See You!
Exploring cloud-scale deception technology to track and analyze attackers, enhancing Azure security through psychological and technical approaches for better threat intelligence and user protection.
WiCy - Monitoring 802.11AC Networks At Scale
Explore challenges in 802.11ac network monitoring and learn to create a custom monitoring platform using repurposed access point hardware. Gain practical knowledge and scripts for implementation.
Rise of the WarPi
Explore WarRoaming techniques, custom gear, and strategies for efficient WiFi discovery. Learn from a top-ranked WiGLE.net contributor's journey and insights into wireless surveying and intelligence gathering.
Hacking LTE Public Warning Systems
Exploring vulnerabilities in LTE Public Warning Systems, demonstrating how fake emergency alerts can be created using low-cost hardware, potentially causing panic or system paralysis.
Infrared - Old Threat Meets New Devices
Exploring infrared technology's resurgence in smart devices, examining potential security vulnerabilities, and demonstrating innovative attack vectors using IR transmitters and receivers.
Taking Over Telecom Networks
Explore telecom network vulnerabilities, attack vectors, and security best practices in this comprehensive overview of mobile infrastructure risks.
Auditable & Provable Privacy of Smart Speakers
Explore smart speaker privacy vulnerabilities, including skill squatting and eavesdropping, and learn about potential solutions like hardware mic disconnects and user awareness.
Hacking Chemical Plants for Competition and Extortion
Explore cyber-physical attacks on industrial systems, from initial espionage to targeted economic damage. Learn attacker strategies, defense opportunities, and the complexities of manipulating chemical processes.
Dreamboot - A UEFI Bootkit
Exploración detallada de la arquitectura UEFI y desarrollo de un bootkit para Windows 8 x64, analizando riesgos de seguridad y demostrando payloads maliciosos como escalada de privilegios y bypass de autenticación.
Swiping Through Modern Security Features
Exploring iOS 6 security features and jailbreak techniques, including kernel ASLR, code signing, and exploit methods. Insights from expert developers on bypassing modern mobile security protections.
Aircraft Hacking - Practical Aero Series
Practical demonstration on remotely attacking and controlling aircraft systems, exploring vulnerabilities in aviation security through hacking techniques and protocols like ADS-B and ACARS.
Analysis to Remote Root 0day in a SSL-VPN Appliance
Análisis detallado de vulnerabilidades en un dispositivo SSL-VPN líder, revelando fallas de seguridad y demostrando la explotación para obtener acceso root remoto no autenticado.
LTE Pwnage - Hacking Core Network Elements
Explore LTE network vulnerabilities, legacy protocols, and security challenges in telecom core elements. Learn about DoS attacks, equipment vulnerabilities, and practical approaches to telecom product security lifecycle.
Page Fault Liberation Army
Explore x86 processor memory translation logic and MMU as a Turing-complete processor. Learn about innovative security approaches and computational possibilities in virtual memory systems.
SSRF PWNs - New Techniques and Stories
Découvrez de nouvelles techniques d'attaques SSRF, leurs impacts sur la sécurité des applications web et des exemples concrets d'exploitation, présentés par deux experts en sécurité informatique.
Embracing the Uncertainty of Attacks with Big Data Analytics
Exploring big data analytics to combat advanced cyber threats, reduce uncertainty, and transform security programs through intelligence-driven detection approaches and innovative strategies.