Browsers Gone Wild
Unveiling creative browser vulnerabilities and attacks, including confidentiality breaches, login detection, and exploiting HTML5 features, with live demonstrations challenging Same Origin Policy understanding.
Security Content Metadata Model with an Efficient Search Methodology for Real Time Monitoring
Efficient metadata model for security content, enabling fast searches and real-time monitoring. Integrates SCAP components, supports NLP queries, and aids in vulnerability resolution and malware analysis.
Exploiting Social Navigation
Discover techniques to compromise social navigation systems through fake GPS reports and bot drivers, exploring privacy risks and traffic manipulation in applications like Waze.
DABiD - The Powerful Interactive Android Debugger for Android Malware Analysis
Explore DABiD, an interactive Android binary debugger for malware analysis. Learn to detect runtime changes, monitor dynamic classes, and modify instructions for effective debugging of complex Android malware.
We Can Still Crack You - General Unpacking Method for Android Packer - No Root
Discover a novel method for unpacking protected Android applications without root access. Learn to bypass anti-analysis techniques and reveal hidden code in packed apps.
API Deobfuscator - Identifying Runtime-Obfuscated API Calls Via Memory Access Analysis
Unveils a resilient API deobfuscation technique using memory access analysis, overcoming limitations of pattern-based approaches to identify runtime-obfuscated API calls in malware and obfuscated code.
Resurrecting the Read Logs Permission on Samsung Devices
Exploit allowing non-privileged apps to access sensitive log data on Samsung devices, bypassing Android's READ_LOGS permission restrictions. Reveals private information from notifications and system logs.
Forging the USB Armory
Explore the development of an open-source USB-sized computer for security applications, featuring advanced SoC technology, secure boot, and ARM TrustZone implementation.
Decentralized Malware on the Blockchain
Explore the potential threat of embedding malware in blockchain transactions, its implications for cybersecurity, and possible solutions to mitigate risks in decentralized systems.
Client-Side Protection Against DOM-Based XSS Done Right
Comprehensive analysis of Chrome's XSS Auditor, revealing vulnerabilities and proposing an improved filter design using client-side taint tracking for robust DOM-XSS protection.
AndroBugs Framework - An Android Application Security Vulnerability Scanner
Explore AndroBugs Framework, a free Android vulnerability analysis system. Learn to identify and mitigate security risks in Android apps before release, enhancing app safety and user protection.
A Peek Under the Blue Coat
Detailed analysis of Blue Coat ProxySG systems, exploring OS mechanisms, file system internals, and security features. Insights for IT professionals managing web traffic proxying and filtering.
Silently Breaking ASLR in the Cloud
Exploit memory deduplication to defeat ASLR in cloud environments, leaking randomized base addresses of libraries and executables in neighboring VMs using a side-channel attack.
Even The LastPass Will Be Stolen, Deal With It!
Uncover vulnerabilities in LastPass password manager, including methods to steal master passwords, bypass 2FA, and access encrypted vaults, highlighting the importance of robust security measures.
Automating Linux Malware Analysis Using Limon Sandbox
Explore automated Linux malware analysis with Limon sandbox. Learn to collect, analyze, and report runtime indicators using static, dynamic, and memory analysis techniques for comprehensive threat assessment.
Attacking the XNU Kernel in El Capitan
Explore new techniques to bypass XNU kernel exploit mitigations in El Capitan, including KASLR and SMEP, and learn how to overcome System Integrity Protection through a real kernel exploit demonstration.
What You Need to Know About the Changing Regulatory Landscape in Information Security
Explore the evolving regulatory landscape in information security with experts discussing challenges, communication gaps, and strategies for navigating policy changes in Europe and beyond.
Cybersecurity for Oil and Gas Industries - How Hackers Can Manipulate Oil Stocks
Explore critical cybersecurity vulnerabilities in oil and gas industries, focusing on SAP and Oracle systems. Learn about potential attacks, their impacts, and strategies for protecting vital infrastructure and operations.
Breaking Access Controls with Blekey
Explore RFID access control vulnerabilities and learn to exploit them using open-source hardware. Discover techniques for circumventing security, logging access, and cloning cards to understand and mitigate risks.
Bypassing Self-Encrypting Drives in Enterprise Environments
Explore SED vulnerabilities, their impact on data protection, and strategies for safeguarding against new threats in enterprise environments.
What Got Us Here Won't Get Us There
Explore InfoSec challenges, industry distractions, and harmful practices. Learn to tackle real problems, avoid security antipatterns, and embrace simplicity for effective cybersecurity strategies.