API Authentication's Poorly Implemented - Security Issues in Web APIs
Explore real-world API security issues, focusing on authentication and authorization problems across various platforms. Learn from examples ranging from online payment systems to embedded device infrastructures.
A Journey Into Synology NAS
Exploring Synology NAS security: environment setup, device fingerprinting, local services analysis, remote access flow, and vulnerability discoveries from local and remote perspectives.
Arbitrary Code Execution on RISC-V Using Fault Injection
Explore fault injection techniques for arbitrary code execution on RISC-V, focusing on control flow corruption and new fault models. Learn practical implications for embedded device security.
Journey to Command Injection - Hacking the Lenovo ix4-300d
Demonstration of chaining vulnerabilities to remotely exploit a Lenovo NAS device, showcasing command injection, XSS, and CSRF techniques for full system compromise.
IoT Bug Hunting - From Shells to Responsible Disclosure
Explore techniques to circumvent security controls in IoT devices, from uncovering vulnerabilities to responsible disclosure. Gain insights into remote attacks and manufacturer security shortcomings.
Ice Ice Baby - Coppin' RAM With DIY Cryo-Mechanical Robot
Discover how to build a robot for extracting RAM contents from embedded devices using cryogenic techniques. Learn about design challenges, practical solutions, and cost-effective construction methods.
Cracking Kyocera Printers
Explore vulnerabilities in Kyocera printers, including remote DoS, file reading, password leakage, and pre-auth RCE. Learn how these security flaws can be exploited to access office networks and monitor confidential documents.
Smart Muttering - A Story and Toolset for Smart Meter Platform
Explore smart meter security vulnerabilities and a new open-source framework for embedded device analysis. Learn about critical infrastructure risks and tools for assessing obscure networks and protocols.
Reverse-Engineering the Supra iBox - Exploitation of a Hardened MSP430-Based Device
Detailed walkthrough of reverse-engineering and exploiting a hardened MSP430-based key storage device, covering firmware extraction, crypto analysis, and various attack techniques.
Praeda to PraedaSploit - The Embedded Device Data Harvesting Tool for the Masses
Explore embedded device data harvesting with Praeda and PraedaSploit. Learn techniques for extracting sensitive information from networked devices and understand the implications for security professionals and researchers.
Ghost in the Shadows - Identifying Hidden Threats Lurking on Our Networks
Explore hidden network threats, focusing on embedded devices, printers, SNMP, and wireless security. Learn strategies to protect your environment and manage vulnerabilities effectively.
Reversing and Exploiting Embedded Devices - Walking the Software and Hardware Stack
Explore embedded device security through reverse engineering and exploitation techniques, covering software analysis, hardware examination, and practical debugging methods.
Demonstrating the HRES Process
Explore embedded device security, network pin tests, and hardware research. Learn about firmware analysis, intelligence gathering, and lateral movement in IoT systems.
Black Hat USA 2025
Black Hat USA 2025
Black Hat Europe 2023
Black Hat Europe 2023
Black Hat Europe 2024
Black Hat Europe 2024
Black Hat Europe 2022
Black Hat Europe 2022