
Explore the vulnerabilities in Backend-as-a-Service solutions for mobile apps, revealing widespread security flaws and potential data breaches in cloud-based storage systems.

Explore non-invasive electrical glitching techniques to bypass software protections and create exploitable conditions in target devices, including clock and voltage manipulation methods.

Explore automated attacks on XML Encryption, including vulnerability detection and exploitation techniques. Learn about recent developments, implementation challenges, and practical security implications.

Explore LTE security vulnerabilities and IMSI catcher techniques. Learn how popular phones can be exploited on 4G networks, with live demonstrations and in-depth analysis of baseband software weaknesses.

Explores recent malware techniques using steganography and covert channels to evade detection. Analyzes real-world examples from cybercrime and targeted attacks, detailing implementation and discussing implications.

Explore how CI tools can be exploited for attacks, including command execution, credential theft, and privilege escalation, with live demonstrations on popular open-source and proprietary platforms.

Explore the security risks of cross-domain script inclusion, including potential data leaks and account compromises. Learn detection methods and defensive measures to protect against these vulnerabilities.

Optimizing infrastructure to defend against DDoS attacks: techniques, experiences, and lessons learned from protecting HTTP/S and DNS services at scale.

Explore GPS spoofing techniques affecting smartphones and smartwatches, including map apps and LBS vulnerabilities. Learn about time spoofing and other positioning methods like WiFi and BLE, with prevention strategies.

Automated tool for detecting and exploiting command injection vulnerabilities in web applications. Covers various exploitation scenarios and reveals 0-day vulnerabilities across different platforms.

Explore practical attacks on obfuscated ciphers, focusing on White-Box Cryptography. Learn techniques to assess security, understand vulnerabilities, and evaluate robustness against key extraction in software implementations.

Exploiting uninitialized memory in 64-bit IE to bypass ASLR, CFG, and EPM sandbox. Techniques for remote code execution and privilege escalation on Windows 8.1 demonstrated through Pwn2Own contest example.

Explore automated detection of cybercrime in anonymous networks beyond TOR, including I2P and FreeNET. Learn about DeWA system for identifying emerging threats in the Deep Web.

Explore Android authentication vulnerabilities through backup channels. Learn about security risks, attack vectors, and mitigation strategies for app developers and protocol analysts.

Explore advanced Kerberos attack detection techniques and learn to protect Windows networks using network monitoring. Includes a novel "Diamond PAC" attack variant and the "Kerberos Leash" tool.

Explore innovative exploit delivery techniques using steganography and polyglots, focusing on encoding browser exploits in image files for undetectable payload transmission.

Aprenda a implementar um programa de segurança tático e eficaz, focando em avaliações ágeis, resposta a incidentes e gerenciamento de bugs. Descubra por que abordagens táticas podem ser mais efetivas que estratégias de longo prazo.

Explore reverse engineering and exploitation of GlobalStar's simplex satcom protocol, uncovering vulnerabilities in satellite communications and demonstrating interception and spoofing capabilities.

Explore critical XXE vulnerabilities in enterprise software, including 0-day exploits in Java and Internet Explorer. Learn detection, exploitation, and prevention techniques.

Explore critical vulnerabilities discovered through bug bounty programs, their impact on customers, and strategies for improving submission quality and researcher participation.

Explore vulnerabilities in multi-precision integer arithmetic used in cryptography implementations. Learn bug patterns, exploitation techniques, and strategies for automated vulnerability detection.