GameOver Zeus - Badguys and Backends
Detailed exploration of GameOver Zeus botnet, covering its operators, law enforcement investigation, and innovative legal strategies used to dismantle the cybercriminal network.
Winning the Online Banking War
Explore advanced techniques to combat banking malware, including evasion methods and a novel Zero Knowledge Protocol-based approach for securing client-server communications.
Android Security State of the Union
Explore key factors driving Android security using data from millions of devices, establishing a baseline and identifying areas for community focus and research.
Next Level Cheating and Leveling Up Mitigations
Explore advanced game cheating techniques and anti-cheat strategies, including practical attacks on popular anti-cheat engines and their implications for multiplayer gaming security.
Insecurity of Mobile Banking
Explore mobile banking app security, revealing privacy risks and vulnerabilities through static and dynamic analysis. Gain insights into global banking app practices and their implications.
Hopping on the CAN Bus
Explore automotive CAN bus systems, learn to send/receive messages, and discover vulnerabilities using CANard, an open-source toolkit for scripting CAN bus tasks.
From Zero to Secure in One Minute
Automated cloud security tool for rapid instance lifecycle: pre-configured, patched, encrypted, and auto-mitigated. Introduces "Cloudefigo" for accelerated security in dynamic cloud environments.
Manna from Heaven - Improving the State of Wireless Rogue AP Attacks
Explore advanced techniques for enhancing wireless rogue AP attacks, including network spoofing and authentication bypass. Learn about a new toolkit for implementing these methods effectively.
Understanding SCADA's Modbus Protocol
Hands-on workshop exploring the Modbus protocol: analyze network captures, configure simulators, and generate traffic to query and fuzz Modbus devices. Practical skills for SCADA systems.
The Underground Ecosystem of Credit Card Frauds
Explore the aftermath of POS malware breaches, uncovering the organized network behind credit card fraud, from purchasing stolen data to creating counterfeit cards and cashing out.
Bar-Mitzvah Attack - Breaking SSL with 13-Year Old RC4 Weakness
Uncover SSL vulnerabilities using RC4 cipher weaknesses. Learn about passive eavesdropping attacks on TLS connections and techniques to recover secret data from encrypted communications.
Information Technology Systems in a Post-Silicon World
Explore post-silicon IT systems, emerging architectures, and AI's impact on InfoSec. Discover how innovation addresses Moore's Law limitations and shapes the future of technology and security.
I'm Not a Human - Breaking the Google reCAPTCHA
Explore techniques to bypass Google's reCAPTCHA using risk analysis manipulation, deep learning for image recognition, and automated solving methods. Discusses implications for CAPTCHA security.
Hey, Your Parcel Looks Bad - Fuzzing and Exploiting Parcelization Vulnerabilities in Android
Explore Android's Binder IPC vulnerabilities through fuzzing and exploitation techniques. Learn to identify, analyze, and exploit "BadParcel" issues for privilege escalation in high-privilege processes.
Never Trust Your Inputs - Causing Catastrophic Physical Consequences From The Sensor
Explore security vulnerabilities in analog-to-digital conversion for industrial control systems. Learn how attackers can manipulate sensor data to cause physical consequences while evading detection.
Mapping the Wireless IoT
Explore wireless IoT security challenges, signal identification techniques, and best practices for revealing unknown signals. Includes a demo of a new tool for mapping radio spectrum and identifying devices.
Break Out of The Truman Show - Active Detection and Escape of Dynamic Binary Instrumentation
Explore active detection techniques for Dynamic Binary Instrumentation, focusing on exploiting weaknesses and escaping control. Learn to identify and overcome DBI environments in cybersecurity.
Rapid Radio Reversing
Explore wireless security research techniques combining SDR and non-SDR tools. Learn efficient reverse engineering processes for analyzing and decoding radio signals in this hands-on demonstration.
Enterprise Apps - Bypassing the iOS Gatekeeper
Explore iOS security vulnerabilities through enterprise apps, examining real-world statistics and a zero-day attack that bypasses Apple's gatekeeper, revealing critical flaws in the iOS security model.
A New CVE-2015-0057 Exploit Technology
Explores CVE-2015-0057 vulnerability, User Mode Callback mechanism, and new exploit techniques in Windows kernel. Analyzes exploit methodology, vulnerability detection, and implications for system security.
DSCompromised - A Windows DSC Attack Framework
Explore a PowerShell toolkit leveraging Windows Desired State Configuration for command-and-control, malware persistence, and automatic re-infection. Learn attack techniques and defensive strategies.