Defeating Pass-the-Hash - Separation of Powers
Explore Windows 10's innovative approach to defeating Pass-the-Hash attacks through strong isolation of symmetric credentials, leveraging virtualization technology to sequester secrets from potential attackers.
Cloning 3G - 4G SIM Cards With A PC And An Oscilloscope - Lessons Learned In Physical Security
Reveals vulnerabilities in 3G/4G SIM cards, demonstrating how to clone them using differential power analysis. Discusses implications for mobile network security and showcases practical experiments.
Abusing Windows Management Instrumentation - WMI
Explore WMI's potential for stealthy, persistent attacks on Windows systems. Learn offensive techniques, backdoor creation, and defense strategies against WMI-based threats.
Remote Exploitation of an Unaltered Passenger Vehicle
Comprehensive exploration of remote vehicle hacking, demonstrating real-world attacks on unaltered cars and pivoting through hardware to send CAN bus messages affecting critical systems.
Red Vs. Blue - Modern Active Directory Attacks, Detection, And Protection
Explore advanced Active Directory attack methods, detection techniques for Golden and Silver Tickets, and effective mitigation strategies. Learn to identify and protect against sophisticated network intrusions.
Writing Badass Malware for OS X
Explore advanced OS X malware techniques, persistence methods, and security bypasses. Learn to create sophisticated threats and enhance Mac protection against current and future malware.
Harnessing Intelligence From Malware Repositories
Explore techniques for extracting intelligence from malware repositories using program analysis and data mining, with insights on connecting seemingly disparate cyber attacks and tracking malware trends.
Rocking the Pocket Book - Hacking Chemical Plant for Competition and Extortion
Explore techniques for exploiting chemical plant systems to cause economic damage while avoiding detection. Learn about attack stages, cost considerations, and creating misleading forensic evidence.
Is the NSA Still Listening to Your Phone Calls? - A Surveillance Debate
Debate on NSA surveillance practices, focusing on Section 215 of the Patriot Act and recent reforms. Explores impact on privacy, national security, and the effectiveness of congressional oversight.
How the Wassenaar Arrangement's Export Control of "Intrusion Software" Affects Industry
Experts discuss implications of Wassenaar Arrangement's export control on "intrusion software" for cybersecurity industry, research, and privacy, drawing parallels to 1990s crypto wars.
Remote Physical Damage 101 - Bread and Butter Attacks
Explore cyber-physical attacks on industrial systems, including generic "bread and butter" techniques and mitigation strategies beyond network security.
Graphic Content Ahead - Towards Automated Scalable Analysis of Graphical Images Embedded in Malware
Explores automated analysis of images in malware, focusing on identifying visually similar samples and classifying images into categories to enhance malware triage and reveal attacker patterns.
Optimized Fuzzing IOKit in iOS
Optimized fuzzing approach for iOS IOKit interfaces, dynamically resolving symbols and parameters to improve efficiency and effectiveness in vulnerability discovery.
Adventures in Femtoland - 350 Yuan for Invaluable Fun
Explore vulnerabilities in 3G/4G networks using femtocells. Learn to intercept data and exploit weaknesses in UMTS infrastructure, from unboxing to proof-of-concept demonstrations.
Internet Plumbing for Security Professionals - The State of BGP Security
Explore BGP security, its vulnerabilities, and practical countermeasures to build trust in the Internet's foundation. Learn about routing leaks, hijacking risks, and implementation strategies for a more secure network infrastructure.
Abusing XSLT for Practical Attacks
Explore XSLT vulnerabilities and practical attacks on XML systems, including arithmetic manipulation, code logic failure, and compromising user confidentiality in web browsers.
When IoT Attacks - Hacking a Linux-Powered Rifle
Explore the security vulnerabilities of a Linux-powered precision rifle, including reverse engineering, attack surfaces, and implications of network-connected firearms.
Forging the USB Armory - An Open Source Secure Flash-Drive-Sized Computer
Explore the creation of a secure, open-source computer the size of a flash drive. Learn about innovative hardware design and advanced security features for portable computing.
Breaking Access Controls With BLEKey
Explore vulnerabilities in RFID access control systems and learn how to exploit them using open-source hardware. Discover techniques for circumventing security, logging access, and cloning cards.
Web Timing Attacks Made Practical
Explore practical web timing attacks, improving data collection and statistical analysis for more effective penetration testing. Learn adaptive techniques and open-source tools for identifying cryptographic vulnerabilities.
CrackLord - Maximizing Password Cracking Boxes
Explore distributed password cracking with CrackLord, a scalable system for load balancing GPU and CPU resources across multiple hardware systems, enhancing efficiency and accessibility.