Stupid RedTeamer Tricks
Discover simple yet effective red teaming tricks to enhance assessments, including improved USB key drops, C&C concealment, and social engineering techniques using Outlook.
Playing Through the Pain - The Impact of Dark Knowledge and Secrets on Security and Intelligence Professionals
Exploring the psychological toll of classified knowledge on intelligence professionals, addressing cognitive dissonance, trauma, and coping strategies in high-stakes security work.
BearSSL - SSL for All Things
Explore BearSSL, an SSL/TLS library optimized for constrained systems. Learn about secure crypto, SSL attacks and defenses, and implementing in small RAM environments.
Hack Microsoft Using Microsoft Signed Binaries
Explore advanced attack techniques using Microsoft signed binaries and PowerShell to bypass detection, manipulate memory, and achieve persistence in Windows systems.
Pentesting - Lessons from Star Wars
Explore threat modeling through Star Wars, gaining practical insights for effective offensive and defensive security strategies in software development.
Not Safe For Organizing - The State of Targeted Attacks Against Civil Society
Exploration of targeted cyber attacks against civil society groups, focusing on Tibetan community and Latin American cases. Discusses attacker tactics, victim impacts, and future trends.
Bypassing Application Whitelisting in Critical Infrastructures
Explore techniques to bypass application whitelisting in critical systems, including code execution, protection bypasses, and vulnerabilities in McAfee's application control.
Android - Practical Introduction into the Insecurity
Practical exploration of Android security vulnerabilities, covering user mistakes and system flaws. Includes demonstrations of local and remote attacks, emphasizing potential risks and damages.
Real Solutions From Real Incidents - Save Money and Your Job
Learn cost-effective strategies to prevent security incidents through real-world scenarios, gap analysis, and enterprise protection methods. Gain insights on leveraging incident response lessons for improved security programs.
Analysis of High Level Intermediate Representation in a Distributed Environment for Large Scale Malware Processing
Explore advanced malware analysis techniques using distributed reverse engineering and machine learning to identify code similarities and extract key characteristics from millions of samples.
Applying DevOps Principles for Better Malware Analysis
Leveraging DevOps principles to streamline malware analysis, automate lab setup, and enhance collaboration among security researchers for more efficient threat detection and response.
CANtact - An Open Tool for Automotive Exploitation
Explore CANtact, an open-source tool for automotive network analysis. Learn to view, decode, and manipulate CAN traffic for reverse engineering and security testing of vehicle systems.
How Anonymous Narrowly Evaded the Cyberterrorism Rhetorical Machine
Explore the factors that prevented Anonymous from being labeled as cyberterrorists, despite their global political activism and masked identity. Gain insights into the complex dynamics of digital activism and cybersecurity rhetoric.
Hide Yo' Kids - Hacking Your Family's Connected Things
Explore vulnerabilities in IoT devices for children, including baby monitors and GPS trackers. Learn research techniques like mobile reverse engineering and network analysis to enhance IoT security.
Stupid Pentester Tricks
Discover creative hacking techniques to overcome pentesting challenges. Learn RFID cloning, universal access cards, key theft methods, and advanced phishing strategies for unconventional target compromise.
The New Wave of Deserialization Bugs
Explore deserialization vulnerabilities in Java, PHP, and Python. Learn to identify and mitigate risks in enterprise applications using practical examples and tools.
Law, Metaphor and the Encrypted Machine
Explore legal metaphors for encryption technology and their implications on civil liberties, commercial interests, and policy decisions in the digital age.
DDoS - Barbarians at the Gate
Explore tools, methods, and data behind headline-making DDoS attacks, gaining insights into modern cybersecurity threats and defense strategies.
Why You Should - But Don't - Care About Mainframe Security
Explore mainframe security breaches, their surprising ease, and media silence. Uncover shocking methods used and understand why mainframe security deserves more attention.
Breaking PRNGs
Explore vulnerabilities in popular frameworks' random value generation, learning to identify and potentially exploit predictable implementations.
The Uroburos Case - Analysis of the Tools Used by This Actor
Explore the sophisticated Uroburos espionage software, including its rootkit, Agent.BTZ, ComRAT, and Cobra Carbon System. Gain insights into the group's infrastructure and operational methods.