Ways to Die in Mobile OAuth
Comprehensive analysis of OAuth vulnerabilities in mobile apps, revealing widespread implementation flaws and security risks. Offers insights for developers to enhance mobile OAuth security.
Viral Video - Exploiting SSRF in Video Converters
Exploiting SSRF vulnerabilities in video converters using HLS playlists, potentially leading to critical security breaches in cloud-based services. Includes demonstration of attacks on major platforms.
Auditing the Compression Algorithm Weapon Cache
Explore decompression bomb attacks, their impact on applications, and strategies for prevention. Learn about various compression algorithms and their vulnerabilities in this security-focused presentation.
Recover a RSA Private Key From a TLS Session With Perfect Forward Secrecy
Explore RSA private key recovery from TLS sessions with Perfect Forward Secrecy, focusing on faulty digital signatures and hardware vulnerabilities in network devices.
AVLeak - Fingerprinting Antivirus Emulators for Advanced Malware Evasion
Explore AVLeak, a tool for fingerprinting antivirus emulators through automated testing. Learn advanced techniques for detecting and evading popular consumer antivirus products.
Towards a Holistic Approach in Building Intelligence to Fight Crimeware
Holistic approach to combat cybercrime by analyzing network attack surfaces and actor behaviors. Explores bulletproof hosting, fast flux networks, and underground forums to proactively identify and block malicious infrastructure.
An Insider's Guide to Cyber-Insurance and Security Guarantees
Explore the rise of cyber-insurance and security guarantees in the InfoSec industry. Learn about their impact, implementation challenges, and potential benefits for businesses and security vendors.
Gattacking Bluetooth Smart Devices - Introducing a New BLE Proxy Tool
Explore BLE security vulnerabilities and learn to intercept communication between smart devices using a new open-source MITM proxy tool. Discover common flaws and best practices for IoT device security.
Cyber War in Perspective - Analysis From the Crisis in Ukraine
Explore the reality of cyber warfare through the lens of the Russia-Ukraine conflict. Gain insights into the strategic impacts, limitations, and implications of digital operations in modern geopolitical crises.
Access Keys Will Kill You Before You Kill the Password
Explore AWS API security, focusing on access key risks and MFA implementation. Learn strategies and tools for enhancing authentication without compromising workflow efficiency.
Account Jumping Post Infection Persistency & Lateral Movement in AWS
Explore AWS security vulnerabilities, infection methods, and post-infection techniques. Learn about account jumping, resource manipulation, and best practices for protecting cloud environments.
Does Dropping USB Drives in Parking Lots and Other Places Really Work?
Explores the effectiveness of USB drive-based attacks through a campus experiment, revealing high success rates and analyzing factors influencing user behavior. Discusses mitigation strategies and demonstrates new tools.
Secure Penetration Testing Operations - Demonstrated Weaknesses in Learning Material and Tools
Explores vulnerabilities in penetration testing practices, demonstrating weaknesses in learning materials and tools. Provides guidance on securing testing procedures and includes a live demonstration of hijacking techniques.
Using EMET to Disable EMET
Explore techniques to bypass EMET's security mitigations, including targeted evasion methods and generic disabling approaches applicable to various endpoint protection products.
Brute-Forcing Lockdown Harddrive Pin Codes
Explore techniques for bypassing AES-256 encrypted hard drive security through front-panel keyboard spoofing and internal design analysis, building on previous research.
Building a Product Security Incident Response Team - Learnings From the Hivemind
Building a Product Security Incident Response Team: Best practices, templates, and actionable recommendations for small to medium companies to establish effective PSIRT processes and respond to vulnerability reports.
Side-Channel Attacks on Everyday Applications
Explore FLUSH+RELOAD side-channel attacks beyond cryptography, demonstrating their potential to leak information from everyday applications like web browsers and text editors.
Unleash the Infection Monkey - A Modern Alternative to Pen-Tests
Explore a new open-source tool for testing network security resilience. Learn how the Infection Monkey simulates attacks, uncovers vulnerabilities, and provides a cost-effective alternative to traditional penetration testing methods.
Security Through Design - Making Security Better by Designing for People
Explore user-centered design methods to create more effective and user-friendly security processes, tools, and communication strategies, improving corporate productivity and security.
Doorways to Eternity - Playing with Patterns in Music
Acclaimed musician Nick Mulvey shares songs and insights on playing with patterns in music, exploring the joy and creativity found in musical experimentation and the intersection of traditional and experimental sounds.
If You Had Three Weeks Left to Live - What Would You Do Differently?
Discover life-changing insights from a brain cancer survivor's journey, exploring conscious living, wellness, and the power of embracing each day as if it were your last.