Service Denied! Understanding How Regex DoS Attacks Work - Lecture
Explore regex DoS attacks in Rails, understand their mechanics, and learn defensive strategies to protect your application from malicious input.
Total ReDoS - The Dangers of Regular Expressions in JavaScript
Discover how regular expressions in JavaScript can lead to security vulnerabilities, learn to identify risky patterns, and implement safer regex solutions to prevent denial of service attacks.
Infinite Traffic Loops at the Application Layer - A Study of DoS Attack Primitives
Explore application-layer traffic loops in network security, examining how infinite loops between servers can be triggered by single IP-spoofed packets to create cost-free DoS attacks.
Towards an Effective Method of ReDoS Detection for Non-backtracking Engines
Explore advanced techniques for detecting ReDoS vulnerabilities in non-backtracking regex engines, featuring EvilStrGen tool and novel attack string generation methods for enhanced security testing.
Attacking with Something That Does Not Exist: Proof of Non-Existence Can Exhaust DNS Resolver CPU
Explore how NSEC3 proof of non-existence in DNSSEC can be exploited to exhaust DNS resolver CPU resources, with detailed attack implementation and performance analysis.
Black Hat Europe 2023
Black Hat Europe 2023
Black Hat Europe 2024
Black Hat Europe 2024
Black Hat Europe 2022
Black Hat Europe 2022