Subverting Satellite Receivers for Botnet and Profit
Exploiting vulnerabilities in satellite receivers to build botnets, highlighting risks in DVB-CA encryption, custom plugins, and CCCAM protocol. Demonstrates potential for large-scale network compromise and unauthorized access.
Faux Disk Encryption - Realities of Secure Storage on Mobile Devices
Explore mobile device data security challenges, debunk full-disk encryption myths, and learn sophisticated secure storage techniques for iOS and Android, addressing real-world application vulnerabilities.
Compromising the Windows Enterprise Via Windows Update
Exploración de vulnerabilidades en Windows Update y WSUS, demostrando cómo comprometer sistemas empresariales mediante actualizaciones maliciosas y controladores de dispositivos USB.
Data-Driven Threat Intelligence - Metrics on Indicator Dissemination and Sharing
Análisis basado en datos de indicadores de inteligencia de amenazas y comunidades de intercambio, explorando eficiencia, calidad y superposición de fuentes durante más de un año.
Breaking HTTPS With BGP Hijacking
Explore BGP hijacking's impact on HTTPS security, revealing vulnerabilities in Internet routing and SSL/TLS PKI. Learn about potential exploits and prevention strategies.
How to Hack Government - Technologists as Policy Makers
Explore how technologists can influence policy-making, focusing on the FTC's role in protecting online privacy and data security through enforcement, research, and consumer protection initiatives.
Hidden Risks of Biometric Identifiers and How to Avoid Them
Explore cutting-edge biometric technologies, their advantages, and potential risks. Learn to evaluate security, reliability, privacy, and ethical concerns for informed implementation of future identification systems.
ThunderStrike 2 - Sith Strike
Explore firmware vulnerabilities in Mac systems, demonstrating software-only attacks and showcasing the potential of Mac firmware malware. Learn about shared vulnerabilities and case studies.
Internet-Scale File Analysis
Explore TOTEM and DRAKVUF systems for large-scale malware analysis, addressing challenges in file diversity, volume, and dynamic analysis through cloud-based orchestration and hardware virtualization.
Taking Event Correlation With You
Explore event correlation in cybersecurity using Giles, a compiler creating SQL-based engines. Learn to detect patterns, link records, and enhance security analysis across various scenarios.
Battle of the SKM and IUM - How Windows 10 Rewrites OS Architecture
Explore Windows 10's revolutionary OS architecture, featuring Virtual Secure Machines, Secure Kernel Mode, and Isolated User Mode. Learn how these changes enhance security and impact system design.
SSL Validation Checking vs. Going to Fail
Explore SSL certificate validation vulnerabilities in mobile apps using SVF tool. Learn about testing methods, real-world results, and implications for app security.
Lessons Learned from Eight Years of Breaking Hypervisors
Explore vulnerabilities in popular hypervisors, examining security features, attack surfaces, and design flaws. Gain insights on improving hypervisor security through real-world examples and expert recommendations.
Analyzing UEFI BIOSes from Attacker & Defender Viewpoints
Explore UEFI BIOS analysis from attacker and defender perspectives, covering key concepts like UEFI boot phases, firmware storage, and security implications for effective reverse engineering of modern PC firmware.
Blended Web and Database Attacks on Real-Time, In-Memory Platforms
Explore innovative attack vectors on real-time, in-memory platforms, blending web and database vulnerabilities. Learn about new SQL injection techniques, server-side JavaScript exploits, and R-based attacks in SAP HANA.
Firmware.RE - Firmware Unpacking, Analysis and Vulnerability-Discovery as a Service
Large-scale analysis of firmware images reveals vulnerabilities across embedded systems, highlighting security challenges and the need for improved tools and techniques in firmware analysis.
DTM Components - Shadow Keys to the ICS Kingdom
Explore vulnerabilities in industrial control system components, focusing on DTM technology used in critical industries. Learn about security flaws and their implications for field devices.
Hack Your ATM with Friend's Raspberry Pi
Explore ATM vulnerabilities and hacking techniques using Raspberry Pi, focusing on device interfaces and communication protocols. Learn about potential security risks and countermeasures in ATM systems.
Network Attached Shell - N.A.S.ty Systems that Store Network Accessible Shells
Explore critical vulnerabilities in network storage devices, their impact on data security, and potential for network exploitation. Learn about attack techniques and implications for IT professionals and consumers.
PDF Attack - A Journey from the Exploit Kit to the Shellcode
Explore PDF-based attacks, from exploit kits to shellcode analysis. Learn to extract and analyze obfuscated JavaScript, modify malicious PDFs, and understand cybercriminal techniques using peepdf tool.
A Practical Attack Against VDI Solutions
Demonstration of a proof-of-concept attack exploiting screen scraping to bypass VDI security measures, highlighting vulnerabilities in secure BYOD solutions.