Mind the Bridge - A New Attack Model for Hybrid Mobile Applications
Unveils a novel attack model for hybrid mobile apps, exploiting JavaScript bridges. Presents vulnerability models, explores embedded browser architecture, and proposes mitigation strategies for enhanced security.
The State of Mobile Security
Exploración del panorama actual de la seguridad móvil, incluyendo amenazas recientes, técnicas de detección, investigación forense y la iniciativa FreeTheSandbox para mejorar el acceso y control de los usuarios sobre sus dispositivos.
One Stop Anomaly Shop
Comprehensive machine learning framework for anomaly detection in datasets. Enables custom preprocessing, enhances accuracy on small datasets, and targets security threats efficiently.
Utilizing Lol-Drivers in Post Exploitation Tradecraft
Exploring kernel-mode attack techniques using signed drivers for post-exploitation, including credential dumping, process injection, and C2 communication. Demos showcase practical applications for red teams.
MacOS Security - Escaping The Sandbox & Bypassing TCC
Explore macOS security measures, including sandboxing and TCC, and learn about potential vulnerabilities and bypass techniques in third-party applications and system components.
Should You Be Afraid of Hands-On Payment Devices?
Unveiling vulnerabilities in Point of Sale terminals: from anti-tampering mechanisms to cloning. Explore the lifecycle of popular devices and the hacking techniques used to compromise payment security.
Grid Computing Attacks on Streaming Services
Uncovers vulnerabilities in grid computing-based live streaming platforms, demonstrating potential for screen manipulation, unauthorized access, and system compromise. Highlights risks in popular Korean services.
Exploiting QSEE, The Raelize Way
Exploiting vulnerabilities in Qualcomm's Trusted Execution Environment through software and hardware attacks, achieving arbitrary code execution and compromising device security.
Bypassing DEP With Jump-Oriented Programming
Explore Jump-Oriented Programming (JOP) for code-reuse attacks, including its fundamentals, the JOP ROCKET tool, and techniques to bypass DEP and ASLR in Windows environments.
Zero Trust Networks - Opportunities and Challenges for Red Team
Explore opportunities and challenges for red teams in zero trust networks, examining strategies and techniques for effective security testing and assessment.
Old Still Cool - Classic SE Formats Merge in Three Peculiar Tales
Explore three unique social engineering tales blending classic formats, revealing innovative techniques and unexpected outcomes in modern cybersecurity scenarios.
Evolution of Offensive Security
Explore the evolution of offensive security techniques and strategies with industry experts, gaining insights into cutting-edge approaches for enhancing cybersecurity defenses.
Privilege Escalation In Da House
Explore advanced privilege escalation techniques for penetration testing and security assessments, focusing on real-world scenarios and practical applications.
Pre-empting Attacks - Relevance of Red Teaming in Enterprises
Explore the critical role of red teaming in enterprise security, focusing on proactive strategies to anticipate and prevent potential attacks through expert insights and practical approaches.
Applied Defense on Docker and Kubernetes
Implement advanced security features for Docker and Kubernetes environments. Learn to protect containerized ecosystems, secure daemons, and safeguard orchestrated deployments against potential threats.
CI - CD With SAST And DAST For Embedded Devices
Explore automated security testing for embedded devices using FOSS, commercial tools, and creative solutions. Learn to implement CI/CD with SAST and DAST for multiple device families at scale.
Signal Processing with GNURadio and SDRs
Hands-on tutorial for signal processing using GNURadio and SDR hardware. Learn digital signal processing techniques, modulation, and practical applications for security assessment of communication systems.
How to Train Your Self-Driving - Dragon Car
Explore open-source autonomous vehicle technology with Donkey Car. Learn to build, test, and deploy AI networks for self-driving cars using Python, Raspberry Pi, and convolutional neural networks.
Hands-on Introduction to Timeless Debugging & Analysis
Hands-on lab introducing timeless debugging and analysis for reverse-engineering. Learn to navigate from crashes to root causes using REVEN platform on Windows scenarios. Combines GUI and Python API approaches.
Hands-On Purple Team Exercises
Hands-on workshop on purple team exercises, combining red and blue team roles. Practice adversary emulation, threat detection, and defense improvement in a simulated environment.
Red Team vs. Blue Team Exercises for ICS - SCADA Security
Hands-on lab exploring industrial control system security through red team attacks and blue team defenses. Bridges knowledge gap between ICS and infosec, focusing on MITRE ATT&CK for ICS implementation.