
Explore a novel technique for exploiting Windows kernel pool overflows, enabling privilege escalation without shellcode or ROP. Learn about security enhancements and bypass methods.

Explore deception in cybersecurity: how attackers deceive, how to recognize it, and how defenders can use deception against attackers. Learn from traditional and emerging research on deception and game theories.

Explore military doctrine to enhance cybersecurity strategies. Learn to apply tactical, operational, and strategic concepts for effective defense against advanced adversaries in today's militarized Internet landscape.

Explore IE11 sandbox vulnerabilities, focusing on logic bugs and Enhanced Protected Mode. Learn techniques to investigate, analyze, and exploit sandbox weaknesses in Windows 8.1.

Explore advanced exploitation techniques and control-flow integrity mechanisms. Learn about Return-Oriented Programming, its countermeasures, and how to bypass emerging CFI solutions.

Explore data protection challenges and solutions for Big Data environments, focusing on security considerations for Hadoop and emerging vulnerabilities in large-scale data management systems.

Explore IE11 sandbox vulnerabilities, focusing on logic bugs and Enhanced Protected Mode. Learn to investigate, analyze, and exploit sandbox escapes discovered during a bug bounty program.

Innovative computer vision attack automatically recognizes touch screen inputs from a distance, posing significant security risks. Countermeasures include a context-aware privacy-enhancing keyboard for sensitive information.

Descubre cómo controlar remotamente todos los dispositivos de un hotel de lujo, explorando vulnerabilidades en sistemas de automatización y sus implicaciones para la seguridad hotelera y de los huéspedes.

Comprehensive analysis of remote automotive attack surfaces across various manufacturers, exploring vulnerabilities and potential security improvements in modern vehicles.

Explores three new attacks against TLS on the web, revealing vulnerabilities in cryptographic protocols, implementation issues, and HTTPS deployment. Discusses attacker capabilities and mitigation strategies.

Explore 48 cryptographic attacks through hands-on challenges, covering block ciphers, public key algorithms, and real-world vulnerabilities. Gain practical insights into crypto exploitation across multiple programming languages.

Explore security vulnerabilities in Nest thermostats, including hardware-level attacks and potential for remote exploitation. Learn about risks to privacy and home security posed by compromised smart home devices.

Explore firmware and physical attacks on data, including SMM bootkits and cold booting. Learn about mitigation tools like TXT and upcoming technologies such as SGX and EPID.

Explore vulnerabilities in smartcard payment systems, including protocol flaws, certification issues, and governance problems. Learn about real-world attacks and their implications for EMV adoption.

Discover techniques for bypassing email and web filtering security, including automated enumeration of services and policies, and creating undetectable client-side attacks to gain remote control of systems.

Explore automatic program analysis techniques for vulnerability discovery, from historical context to cutting-edge methods, with practical examples and demos for effective security research.

Explore memcached injection vulnerabilities across popular web platforms, learning attack techniques, potential impacts, and post-exploitation strategies for improved application security.

Exploración de vulnerabilidades en OAuth 2.0 para redes sociales, demostrando cómo la suplantación de aplicaciones puede llevar a la filtración masiva de datos de usuarios y gráficos sociales.

Explore the impact of third-party libraries on software vulnerabilities, analyzing their spread across products and discussing strategies to mitigate risks in application development.

Explore GUI element misuse as a novel class of access control vulnerabilities. Learn to identify, classify, and exploit GEMs in Windows applications using the GEM Miner tool.