Hacking Automatically - Applying Program Analysis to IoT
Discover how program analysis can uncover vulnerabilities in IoT devices. Learn about firmware analysis challenges, memory corruption patterns, and see 20 real-world examples of security flaws identified through automated techniques.
COMpromise - Remote Code Execution in Windows Development Environments
Explore how viewing untrusted code in Windows IDEs can lead to remote code execution through COM vulnerabilities, with practical exploit chains for Visual Studio demonstrated.
Cloud as an Attack Vector
Explore how cybercriminals exploit cloud services as attack vectors, including shadow IT risks and malware delivery. Learn about emerging threats and security implications in the rapidly evolving cloud landscape.
Putting It All Together - Building an iOS Jailbreak from Scratch
Comprehensive guide to building an iOS jailbreak, covering memory vulnerabilities, kernel exploitation, sandbox escape, filesystem remounting, and code injection techniques for the latest Apple devices.
Dissecting Rotten Apples - macOS Malware Analysis
Comprehensive exploration of macOS malware analysis, covering system architecture, common malware behaviors, and real-world sample demonstrations. Ideal for security researchers and IT professionals.
HTML5 Attack and Defense
Explore HTML5 security: new attack vectors, vulnerabilities in modern web technologies, and best practices for secure coding in interactive applications.
Mobile Code Mining for Discovery & Exploits
Explore mobile app vulnerabilities across iOS, Android, and Windows platforms, with demos and tools for effective source code review and security analysis.
How Secure Is Internet Banking in India
Comprehensive analysis of internet banking security in India, covering access control, data protection, system design, and best practices for a safer online banking experience.
SamuraiSTFU - Smartgrid Testing Framework for Utilities
Specialized Linux distribution for electric utility security testing, featuring tools for network, web, embedded, and RF testing, plus energy sector emulators and documentation.
Hardware Backdooring is Possible
Demonstration of permanent hardware backdooring using Rakshasa malware, exploring BIOS vulnerabilities and implications for computer security and forensics practices.
Scale Hacking to Secure Your Cloud and Beyond
Learn tips and tricks for scaling bug hunting in cloud environments, enhancing your cybersecurity skills and improving your ability to find vulnerabilities efficiently.
Career Opportunities in Information Security
Explore diverse career paths in information security with insights from a seasoned professional. Learn about key roles, skills, and opportunities in this rapidly evolving field.
The Mirai BotNet and Where DDoS Attacks Are Headed
Explore the Mirai BotNet's impact on DDoS attacks, analyzing its source code, real-world incidents, and future implications. Learn prevention strategies for the evolving threat landscape.
Detecting & Exploiting XSS Vulnerabilities
Learn techniques for detecting and exploiting Cross-Site Scripting (XSS) vulnerabilities, enhancing your web security skills and understanding of common attack vectors.
BYOD - How Will IT Shape Your Wireless Network Security in Future
Explore BYOD trends, security frameworks, and technology options for managing wireless network security in the era of personal devices and hotspots.
Harnessing Intel Processor Trace on Windows for Fuzz
Explore Intel Processor Trace on Windows for fuzzing. Learn about driver development, debugging with IDA Plugin, and leveraging hardware-supported branch tracing for efficient, targeted evolutionary fuzzing.
Reverse Engineering Satellite Based IP Content Distribution
Reverse engineering satellite IP content delivery: from reception to packet analysis, error correction, and high bitrate handling. Culminates in creating a Linux-based client mimicking commercial versions.
Reverse Engineering Windows Defender's JavaScript Engine
Reverse engineering Windows Defender's JavaScript engine: analysis, functionality, tooling, and potential vulnerabilities in MpEngine.dll's core antivirus system.
DIY ARM Debugger for Wi-Fi Chips
Explore DIY ARM debugging for Wi-Fi chips using Nexmon framework. Learn to set breakpoints, handle debugging events, and perform single-step debugging on Cortex-R4 microcontrollers in FullMAC Wi-Fi firmwares.
Subverting Your Server Through Its BMC - The HPE iLO4 Case
Exploración profunda de la seguridad de HP iLO4, incluyendo análisis del firmware, vulnerabilidades y una nueva técnica de explotación para comprometer el sistema operativo del servidor host a través de DMA.
Visiting The Snake Nest
In-depth analysis of Turla espionage group's tactics, techniques, and custom toolset for targeting governments and diplomats, presented by ESET malware researchers Matthieu Faou and Jean-Ian Boutin.