The Adventures of AV and the Leaky Sandbox
Explore a novel data exfiltration technique exploiting cloud-enhanced antivirus sandboxes in highly secure enterprises, demonstrating vulnerabilities in seemingly protected systems.
Portable Data exFiltration - XSS for PDFs
Explore PDF vulnerabilities and learn how a single HTTP link can compromise PDF contents, exposing security risks in widely-used document formats and generators.
See No Evil, Hear No Evil - Hacking Invisibly and Silently with Light and Sound
Explore innovative hacking techniques using light and sound for C2 channels, exfiltration, and exploitation. Learn about bypassing security protections and defending against these novel attack methods.
A Practical Attack Against VDI Solutions
Explore a practical attack against VDI solutions, demonstrating how malicious apps can exploit screen scraping to bypass security measures and exfiltrate data from remote workstations.
Smart Nest Thermostat - A Smart Spy in Your Home
Explore security vulnerabilities in Nest thermostats, including hardware-level attacks and potential for remote exploitation. Learn about risks to privacy and home security posed by compromised smart home devices.
DropSmack - How Cloud Sync Services Render Your Corporate Firewall Worthless
Explore cloud sync services' security risks, including malware delivery, command and control channels, and data exfiltration. Learn detection strategies and see live demonstrations of potential vulnerabilities.
Blink - The Network Perimeter is Gone
Explore network security challenges in the era of vanishing perimeters, covering wireless threats, data exfiltration, and evolving security paradigms for modern IT environments.
Exfil and Reverse Shells in a Whitelisted World
Explore techniques for data exfiltration and reverse shell creation in environments with strict whitelisting, enhancing your penetration testing and security assessment skills.
Analyzing DNS Traffic for Malicious Activity Using Open Source Logging Tools
Explore DNS traffic analysis for malicious activity using open-source logging tools. Learn about log processing, indexing, and visualization to detect threats like DNS amplification and data exfiltration.
Hidden Treasure - Detecting Intrusions with ETW
Explore intrusion detection using ETW, covering event capture, real-time solutions, and practical examples. Learn to identify malicious activities and optimize event monitoring for enhanced cybersecurity.
Abusing Normality - Data Exfiltration in Plain Site
Explore innovative data exfiltration techniques that leverage everyday digital activities, uncovering hidden vulnerabilities in seemingly normal online behaviors.
Breaking NBAD & UEBA Detection
Explore techniques to bypass Network Behavior Anomaly Detection (NBAD) and User Entity Behavior Analytics (UEBA), covering data poisoning, exfiltration, and various attack methods with live demonstrations.
FragAttacks - Aggregation and Fragmentation Flaws in Wi-Fi
Explore Wi-Fi security vulnerabilities, focusing on aggregation and fragmentation flaws. Learn about exploit techniques, design issues, and potential solutions in this technical presentation.
The Dark Side of the ForSSHe
Explore the world of OpenSSH backdoors, their analysis, and prevention methods. Learn about advanced malware techniques and how to protect Linux servers from sophisticated attacks.
XSS - No, the Other "S"
Explore the often-overlooked dangers of cross-site styling attacks, their potential for data exfiltration, and strategies to protect your websites and applications from these CSS-based vulnerabilities.
Prevent Data Exfiltration with Google Cloud's Built-in Controls
Explore defense-in-depth strategies and Google Cloud's security technologies to mitigate data exfiltration risks, featuring insights from Charles Schwab and Commerzbank.
Block DNS Exfiltration with Dnsmasq Proxy
Explore DNS exfiltration techniques and learn to mitigate threats using dnsmasq sidecar. Discover how hackers exploit DNS for data theft and implement effective countermeasures to enhance network security.
Leveraging Large Language Models to Enhance Insider Threat Investigation Capabilities
Discover innovative methods using LLMs for cybersecurity investigations, focusing on semantic watermarking techniques to detect and trace unauthorized data exfiltration across air-gapped systems.
Defeating VPN Always-On: Security Control Analysis and Bypass Methods
Discover security vulnerabilities in VPN Always-On implementations, exploring bypass techniques and hardening strategies for better network protection and data leak prevention.
AWS CloudQuarry: Digging for Secrets in Public AMIs
Dive into AWS security vulnerabilities through an analysis of 3.1M AMIs, exploring credential exposure risks, detection methodologies, and essential cloud security practices for preventing breaches.
Infrastructure as Remote Code Execution: How to Abuse Terraform to Elevate Access
Explore security risks of Terraform, demonstrating exploitation techniques for privilege escalation and unauthorized access. Learn practical recommendations for securing cloud infrastructure deployments.