Fuzzing and Exploiting Virtual Channels in Microsoft Remote Desktop Protocol for Fun and Profit
Explore coverage-based fuzzing of RDP client virtual channels, targeting complex functionalities like Sound, Graphics, USB, and Filesystem to uncover potential vulnerabilities and crashes.
Booting the iOS Kernel to an Interactive Bash Shell on QEMU
Explore iOS kernel emulation on QEMU, achieving interactive bash shell and live kernel debugging. Discover groundbreaking research towards a full open-source iOS system emulator.
Lessons and Lulz - The 5th Annual Black Hat USA NOC Report
Insights and humor from Black Hat's Network Operations Center, revealing security professionals' behavior on open WiFi and discussing network setup, security, and improvements.
Project Zero - Five Years of Make 0Day Hard
Explore Project Zero's impact on cybersecurity, its core principles, and the need for such initiatives in the tech industry. Gain insights into vulnerability research and mitigation strategies.
Chain of Fools - An Exploration of Certificate Chain Validation Mishaps
Explore implications of poor cryptographic API design, insecure certificate chain validation, and widespread usage of APIs like Android SafetyNet. Recommendations for implementers and API authors are proposed.
Everybody Be Cool, This Is a Robbery!
Explore attack paths on a major bank HSM, including unauthenticated methods for full control, in this technical presentation targeting high-security solutions.
Shifting Knowledge Left - Keeping up with Modern Application Security
Explore modern application security challenges in DevSecOps, including evolving web technologies, persistent vulnerabilities, and emerging framework defenses against common threats.
A Compendium of Container Escapes
Comprehensive overview of container escape techniques, from basic concepts to advanced exploits, covering orchestrators, Docker sockets, mount points, and kernel structures.
Automation Techniques in C++ Reverse Engineering
Explore dynamic analysis techniques for C++ reverse engineering, focusing on structure usage and function argument types through DLL injection-based automation.
Playing Offense and Defense with Deepfakes
Explore deepfake technology's offensive and defensive applications, including creation process and underlying deep learning models. Gain insights into this powerful and controversial AI tool.
All Your Apple Are Belong to Us - Unique Identification and Cross-Device Tracking of Apple Devices
Explore unique identification and cross-device tracking of Apple devices, including public APIs and vulnerabilities, to understand potential privacy implications and security risks.
Backdooring Hardware Devices by Injecting Malicious Payloads on Microcontrollers
Explore techniques for injecting malicious payloads into microcontrollers, from basic to advanced methods, to create hardware backdoors. Learn about firmware entry points and payload execution.
0-Days and Mitigations - Roadways to Exploit and Secure Connected BMW Cars
Explore vulnerabilities in connected BMW cars' infotainment and telematics systems, including 0-day exploits, and learn about mitigation strategies for enhanced automotive cybersecurity.
Exploiting Windows Hello for Business
Uncover vulnerabilities in Windows Hello for Business and learn to scan and secure corporate environments with a new toolset for enhanced Active Directory visibility.
The Discovery of a Government Malware and an Unexpected Spy Scandal
Explore the eSurv case study and trace the evolution of lawful intercept from Windows Trojans to professional spyware, uncovering a government malware scandal and its implications.
First Contact - Vulnerabilities in Contactless Payments
Explore vulnerabilities in contactless payment systems, examining protocols and potential security risks in this comprehensive analysis of NFC technology.
Faking a Factory - Creating and Operating a Realistic Honeypot
Learn to design and operate a realistic industrial control system honeypot, exploring technical aspects and industrial automation processes for enhanced cybersecurity.
Misuse of DNS - The Second Most Used Protocol
Explore DNS vulnerabilities and attacks, examining the protocol's critical role in internet traffic and its ongoing security challenges as IPv6 adoption grows.
Escaping Virtualized Containers
Explore container security, focusing on shared kernel vulnerabilities that may allow processes to escape and compromise the host system. Learn about potential risks and mitigation strategies.
WIFI - Important Remote Attack Surface - Threat is Expanding
Explore Wi-Fi driver vulnerabilities and security issues before password authentication, uncovering potential threats and expanding attack surfaces in wireless networks.
BitLeaker - Subverting BitLocker with One Vulnerability
Explore TPM vulnerabilities and their impact on BitLocker encryption, uncovering potential security risks in widely-used commercial devices.