Charge Your Device with the Latest Malware
Exposición de vulnerabilidades USB en sistemas Android personalizados, con demostración de ataque y escenario práctico, revelando implicaciones y logrando acceso root.
Hacking the Wireless World with Software Defined Radio - 2.0
Explore RF spectrum analysis, reverse engineering wireless systems, and hacking techniques using software-defined radio. Learn to decode satellite communications, track aircraft, and monitor ACARS.
Quantified Self - A Path to Self-Enlightenment or Just a Security Nightmare
Explore the security risks and privacy concerns of Quantified Self technology, including data leaks, tracking vulnerabilities, and best practices for protecting personal information.
The Power of Pair - One Template that Reveals 100+ UAF IE Vulnerabilities
Discover a unique fuzzing strategy that revealed over 100 IE use-after-free vulnerabilities. Learn about the vulnerability hunting system and techniques used to find critical browser security flaws.
Quantum Key Distribution and the Future of Encryption
Explore quantum key distribution and its role in future encryption, covering quantum mechanics basics, algorithms, and real-world experiments to ensure data security in the quantum computing era.
How to Find Bugs in USB Device Drivers
Explore USB device driver vulnerabilities using vUSBf framework. Learn about fuzzing techniques, bug detection, and potential security risks in USB implementations across various operating systems.
Secure Digital Communications for Our Modern Dystopia
Secure communication system for hostile environments, leveraging NASA's Disruption-Tolerant Networking for activists, refugees, and trolls. Embraces high-throughput physical data transfer methods.
Man in the Binder - He Who Controls IPC, Controls the Droid
Explore Android's Binder IPC system, its security implications, and potential vulnerabilities through a POC rootkit demonstration and in-depth analysis of low-level Binder operations.
Same Origin Method Execution - Exploiting a Callback for Same Origin Policy Bypass
Explore a powerful web attack technique that exploits JSONP to bypass Same Origin Policy, potentially compromising entire domains without user interaction or typical browser protections.
Bypassing HTTP Strict Transport Security
Explore vulnerabilities in HTTP Strict Transport Security (HSTS) and learn how attackers can exploit inter-operation weaknesses to bypass this protection and launch SSLStrip attacks.
APTs Way - Evading Your EBNIDS
Explore advanced techniques for evading Emulation Based Network Intrusion Detection Systems, covering preprocessing, emulation, and heuristic detection evasion methods used by sophisticated attackers.
Cellular Exploitation on a Global Scale - The Rise and Fall of the Control Protocol
Explore hidden cellular device controls, their vulnerabilities, and potential for global exploitation. Learn reverse engineering techniques and gain insights into Over-the-Air code execution across major platforms.
Windows Kernel Graphics Driver Attack Surface
Explore the attack surface of Windows graphics drivers, including exposed ioctl's, driver internals, and security implications for researchers and developers.
Abusing Microsoft Kerberos - Sorry You Guys Don't Get It
Explore Kerberos vulnerabilities in Microsoft Active Directory, revealing long-term security risks and challenging assumptions about authentication protocols.
MoRE Shadow Walker - The Progression of TLB-Splitting on x86
Explore TLB-splitting evolution on x86 architecture, from defensive memory protections to offensive rootkit techniques. Learn new methods for modern processors and their implications for cybersecurity.
Computrace Backdoor Revisited
Exposición de vulnerabilidades en software antirrobo Computrace, demostrando fallos de seguridad y posibles ataques. Incluye análisis del protocolo, comportamiento sospechoso y métodos de detección/desactivación.
Poacher Turned Gamekeeper - Lessons Learned from Eight Years of Breaking Hypervisors
Explore hypervisor vulnerabilities, attack surfaces, and security design flaws through real-world examples. Learn key lessons for improving hypervisor security and hardening techniques.
Understanding TOCTTOU in the Windows Kernel Font Scaler Engine
Explore TOCTTOU vulnerabilities in Windows Kernel Font Scaler Engine, covering basic double fetch issues, stealthy design flaws, and their impact on system security. Learn about font file manipulation and exploit techniques.
OpenStack Cloud at Yahoo Scale - How to Avoid Disaster
Learn strategies to secure large-scale OpenStack deployments, including hardening techniques, compromise mitigation, and network architecture considerations, based on Yahoo's experience managing massive cloud infrastructure.
Why Control System Cyber-Security Sucks
Explores challenges in industrial control system cybersecurity, critiquing current approaches and advocating for a paradigm shift towards standardized IT practices and people-centric solutions.
Next Generation Disassembly Framework
Explore next-gen disassembly framework for multi-architecture binary analysis. Learn about Capstone engine's features, design challenges, and potential applications in reversing, exploit development, and malware detection.