TeamTNT - Explosive Cryptomining
Explore TeamTNT's cryptojacking tactics targeting Linux servers, including their attack methods, credential theft, and evolution from Docker instances to Windows systems.
Come to the Dark Side, We Have Apples - Turning macOS Management Evil
Explore advanced offensive techniques for exploiting macOS management platforms, including MDM and Jamf, to gain unauthorized access and control over enterprise systems.
The Price of Compatibility - Defeating macOS Kernel Using Extended File Attributes
Explore macOS kernel vulnerabilities through FAT filesystem implementation flaws, focusing on extended file attributes and their potential for launching attacks on the operating system.
Documents of Doom - Infecting macOS via Office Macros
Explore macOS vulnerabilities through Office macros, analyzing recent attacks and detailing a novel exploit chain that can infect fully-patched systems with minimal user interaction.
Exploiting Directory Permissions on macOS
Explore macOS directory permission vulnerabilities, from arbitrary overwrites to privilege escalation. Learn techniques to control file contents and understand the intricacies of macOS security.
Exploiting Zoom on MacOS
Exploración detallada de una vulnerabilidad de ejecución remota de código en el cliente Zoom para macOS, incluyendo técnicas de ingeniería inversa y explotación aplicables a otras aplicaciones.
Sneaking Past Device Guard
Exploración de técnicas avanzadas para eludir Device Guard en Windows 10, incluyendo métodos que requieren privilegios de administrador y otros que utilizan aplicaciones nativas del sistema operativo.
Finding Vulnerabilities in iOS - MacOS Networking Code
Explore iOS/macOS networking vulnerabilities, focusing on mbuf processing in XNU kernel. Learn about network packet structures, vulnerability discovery techniques, and PoC exploit development.
Building an Effective Intrusion Detection Program
Learn to build an effective intrusion detection program using affordable tools. Covers cloud apps, endpoints, network security monitoring, and crowdsourced incident response to catch breaches quickly.
Fire & Ice - Making and Breaking macOS Firewalls
Explore macOS firewall creation and vulnerabilities, covering kernel-level socket filtering, user-mode communication, secure installation, and self-defense mechanisms. Learn about firewall bypasses and potential weaknesses.
ZEROing Trust - Do Zero Trust Approaches Deliver Real Security?
Analyze effectiveness of zero trust security across modern OS platforms, examining measurable properties to establish trust in various threat scenarios.
Divide et Impera - MemoryRanger Runs Drivers in Isolated Kernel Spaces
Explore Windows 10 kernel memory protection, its vulnerabilities, and MemoryRanger's innovative approach to isolating drivers for enhanced security against malware attacks.
EBPF ELFs JMPing Through the Windows
Explore eBPF for Windows: capabilities, security model, design, and attack surface. Uncover vulnerabilities, witness fuzzing demos, and discuss exploitation challenges in Windows Protected Process.
Defeating Pass-the-Hash - Separation of Powers
Explore Windows 10's innovative approach to defeating Pass-the-Hash attacks through strong isolation of symmetric credentials, leveraging virtualization technology to sequester secrets from potential attackers.
Windows 10 Mitigation Improvements
Explore Microsoft's data-driven approach to software security, including proactive monitoring, analysis of exploits, and mitigation improvements in Windows 10 to enhance protection against vulnerabilities.
Safeguarding Your Business Assets Through Understanding of the Win32API
Explore Win32API vulnerabilities and learn advanced techniques to protect business assets from potential security threats in Windows systems.
DKOM - Direct Kernel Object Manipulation
Explore advanced Windows kernel manipulation techniques, focusing on DKOM for stealthy system modifications and rootkit development.
Addressing Complete Security to Save Money
Explore comprehensive Windows security strategies to reduce costs and enhance protection in this insightful presentation on addressing vulnerabilities and implementing effective safeguards.
How Do I Detect Technique X in Windows - Applied Methodology to Definitively Answer This Question
Learn a systematic approach to detect specific techniques in Windows, enhancing your ability to identify and analyze potential security threats and vulnerabilities.
Windows 11 At Your Service
Explore Windows 11's automation feature and its potential security implications. Learn how users can create custom processes that are distributed and executed across machines.
The Linux Kernel Hidden Inside Windows 10
Explore the Linux kernel in Windows 10, its implementation, security implications, and potential vulnerabilities. Learn about system calls, process management, and attack surfaces in this unique OS integration.