Qiling Framework with IDA Pro
Explore Qiling Framework's sandbox emulation capabilities with IDA Pro for cross-platform binary analysis, fuzzing, and dynamic MBR analysis. Learn to build custom analysis tools using Python APIs.
A Practical Introduction to BLE Security Without Any Special Hardware
Hands-on lab exploring Bluetooth Low Energy security vulnerabilities using simulated devices. Learn to assess and exploit common BLE weaknesses without specialized hardware.
Writing Bare-Metal ARM Shellcode
Learn to write ARM shellcode for IoT devices, covering ARM architecture, system calls, and techniques for creating compact, reliable payloads. Includes hands-on labs and a demo of exploiting an ARM-based IoT device.
Fuzzing - Finding Your Own Bugs and 0days
Aprenda a criar e usar um fuzzer para encontrar bugs e vulnerabilidades, incluindo técnicas para escrever exploits e obter acesso a sistemas. Demonstrações práticas incluídas.
Spoofing Your Location on iOS Without Jailbreaking
Explore a physical hardware device for GPS spoofing on non-jailbroken iPhones, offering a flexible and accurate solution beyond traditional app-based methods.
Inside the Mind of a Threat Actor - Beyond Pentesting
Explore the distinctions between pentesting and red teaming, delving into tools, techniques, and career paths. Gain insights on becoming a red team operator and valuable resources for professional growth.
Blue Team Visibility
Explore strategies for enhancing blue team threat detection capabilities, leveraging multiple data sources to stay ahead of sophisticated attackers in an ever-evolving cybersecurity landscape.
The Art of Exploiting Logical Flaws in Web Applications
Exploring techniques to detect and exploit logical vulnerabilities in web applications, focusing on manual testing methods and real-world examples from bug bounty programs.
The Work of Cyber in the Age of Mechanical Reproduction
Explore how advanced threat actors systematize and scale malware operations, and learn to analyze relationships between campaigns, malware families, and threat actors in this cybersecurity deep dive.
Subverting BitLocker With One Vulnerability
Discover a novel vulnerability in TPM that compromises BitLocker encryption, allowing VMK extraction without physical access. Learn about the sleep mode exploit and its impact on system security.
The Road Towards 365 Bugs in Microsoft Office 365
Discover vulnerabilities in Microsoft 365 applications, including cross-tenant privacy leaks, SQLi, CSRF, SSRF, and XSS. Learn bug hunting techniques and tips for testing new Office 365 features.
AEZAKMI - Browser Anonymity & Fingerprinting Bypass
Explore AEZAKMI, a tool for browser anonymity and fingerprinting bypass. Learn how it obfuscates common parameters to enhance online privacy and support multi-account usage.
Jailbreaks Never Die - Exploiting iOS 13.7
Unveiling iOS 13.7 exploit chain: kernel vulnerabilities, mitigation bypasses, and techniques for reading/writing kernel memory. Insights into iOS security research and jailbreak development.
Android RATs Detection With a Machine Learning-Based Python IDS
Explore Android RATs detection using machine learning and Python IDS. Learn about dataset creation, Slips IDS implementation, and live demo of RAT activity detection in mobile device network traffic.
Anatomy of Automated Account Takeovers
Explore the end-to-end process of automated account takeovers, including attack methodologies, technical innovations, and strategies for capitalizing on ATOs. Learn about UX-centric security measures to combat this growing threat.
PEsidious - Create Mutated Evasive Malware Using AI
Explore AI-powered malware mutation techniques using Generative Adversarial Networks and Deep Reinforcement Learning to create evasive samples, challenging traditional detection methods and enhancing cybersecurity defenses.
Quark Engine
Innovative Android malware analysis engine using criminal law principles. Develops a scoring system with five stages to assess malicious activities, overcoming obfuscation techniques through a specialized Dalvik bytecode loader.
Walk Through Access Control Systems
Exploring vulnerabilities in biometric access control systems, including server command forgery, unauthorized user addition, and face database exposure. Demonstrates exploits to leak employee data and bypass security measures.
A Review of Modern Code Deobfuscation Techniques
Explore modern code deobfuscation techniques, from basic analysis to advanced semantic-based methods. Learn limitations of syntactic approaches and discover state-of-the-art program synthesis techniques.
System-Level Threats - Assumptions in Modern Product Security
Explore system-level security threats and challenge assumptions in modern product security. Gain insights into potential vulnerabilities and strategies for robust protection.
Hacking Yachts Remotely - IoT Hacking At Sea
Explore vulnerabilities in yacht IoT systems and learn techniques for remote hacking of maritime vessels, uncovering potential security risks at sea.