Debug Resurrection on Nordic nRF52 Series
Uncover vulnerabilities in Nordic nRF52 SoCs through debug resurrection techniques. Learn about IoT security implications and potential exploits in these widely-used platforms.
This is for the Pwners - Exploiting a WebKit 0-day in PlayStation 4
Explore WebKit exploitation techniques for PlayStation 4, focusing on browser vulnerabilities as entry points for full-chain attacks. Learn about hardening challenges and cutting-edge exploit development.
How to Better Fuzz Windows 10 DirectX Kernel at Present
Explore advanced techniques for fuzzing Windows 10 DirectX kernel, uncovering new attack methods and vulnerabilities in the rendering engine that powers the Windows platform.
Permission Mining in GCP
Explore effective permissions and identity assumption in Google Cloud Platform to enhance security and prevent privilege escalation risks.
Finding Bugs Compiler Knows but Doesn't Tell You - Dissecting Undefined Behavior Optimizations in LLVM
Explore LLVM compiler optimizations for undefined behavior, uncovering hidden bugs and security vulnerabilities in C/C++ programs through advanced static analysis techniques.
IAM Concerned - OAuth Token Hijacking in Google Cloud
Explore OAuth token hijacking vulnerabilities in Google Cloud, understanding attack vectors and mitigation strategies for enhanced GCP environment security.
Discovering 20 Year Old Vulnerabilities in Modern Windows Kernel
Explore how legacy components in Windows 10 can harbor decades-old vulnerabilities, focusing on printer drivers and their potential security implications.
Story of Jailbreaking iOS 13
Explore the process and techniques of jailbreaking iOS 13, including kernel vulnerabilities and unauthorized code execution, presented by an expert at Black Hat conference.
EFIxplorer - Hunting for UEFI Firmware Vulnerabilities at Scale with Automated Static Analysis
Discover automated static analysis techniques for identifying UEFI firmware vulnerabilities at scale, addressing the lack of systemic approaches in x86-based systems research.
Precursor - Towards Evidence-Based Trust in Hardware
Explore evidence-based trust in hardware through the Precursor platform, challenging faith-based approaches and proposing new methods for verifiable hardware security.
The Evil of Spy Camera
Explore the structure, principles, and detection methods of spy cameras in this informative talk on combating hidden surveillance devices.
Walking Your Dog in Multiple Forests - Breaking AD Trust Boundaries through Kerberos Vulnerabilities
Explore Kerberos vulnerabilities in Active Directory forest trusts, revealing how attackers can breach trust boundaries in enterprise environments with multiple AD forests.
The Evil Alt-Ego - Abusing HTTP Alternative Services
Explore HTTP Alternative Services header vulnerabilities and potential exploits, including load balancing manipulation and client segmentation attacks.
Moving from Hacking IoT Gadgets to Breaking into One of Europe's Highest Hotel Suites
Explore tools and methods for hacking BTLE-based mobile phone key systems in hotels, from proof of concept to real-world application. Learn about vulnerabilities in IoT security and their practical implications.
Inside the Apple T2
Explore the inner workings of Apple's T2 chip, including methodology and tools for complex security research, going beyond publicly available technical details.
Women in Security - Building a Female InfoSec Community in Korea, Japan, and Taiwan
Explore how female InfoSec communities in Korea, Japan, and Taiwan are built, maintained, and overcome challenges to foster sustainable growth and attract new members.
Hacking Ten Million Useful Idiots - Online Propaganda as a Socio-Technical Security Project
Explore how online propaganda exploits socio-technical systems through data science, psychology, and security principles to influence millions of users.
Breaking Encrypted Databases - Generic Attacks on Range Queries
Explore techniques for securely storing and querying outsourced data, focusing on range queries. Learn about common building blocks, commercial solutions, and potential vulnerabilities in encrypted databases.
Securing the System - A Deep Dive into Reversing Android Pre-Installed Apps
Explore techniques for analyzing pre-installed Android apps, including emulator challenges, component collusion detection, and privileged context behavior changes.
Paging All Windows Geeks – Finding Evil in Windows 10 Compressed Memory
Explore Windows 10 memory compression implementation, undocumented structures, and algorithms to enhance forensic tools for detecting malicious activities in compressed memory.
Process Injection Techniques - Gotta Catch Them All
Comprehensive overview of Windows process injection techniques for x64 systems, focusing on medium integrity processes without privilege elevation. Explores various methods and their implications.