Exploring the Hidden Attack Surface of OEM Routers
Descubre vulnerabilidades críticas en routers OEM y sus implicaciones para la seguridad. Análisis detallado de un caso de estudio que revela fallos en la cadena de suministro y prácticas de seguridad deficientes.
Dissecting Broadcom Bluetooth
Explore Broadcom Bluetooth firmware vulnerabilities and modifications using InternalBlue framework. Learn about security risks, pairing behavior alterations, and a remote exploit affecting popular devices.
Open Source Firmware
Einführung in Open-Source-Firmware: Geschichte, Entwicklung und Zukunft. Überblick über Technologien, Sicherheitskonzepte und neue Trends in der Firmware-Entwicklung für verschiedene Hardware-Plattformen.
Wallet.fail
Comprehensive analysis of security vulnerabilities in popular cryptocurrency hardware wallets, demonstrating architectural, physical, and software flaws through live hacking demonstrations and detailed explanations.
A Deep Dive Into Unconstrained Code Execution on Siemens S7 PLCs
Explore unconstrained code execution on Siemens S7 PLCs, revealing bootloader vulnerabilities and security implications. Learn about the special access feature and its potential for exploitation or forensic use.
Uncover, Understand, Own - Regaining Control Over Your AMD CPU
Explore AMD's Platform Security Processor: firmware analysis, functionality insights, and security implications. Learn to extract, replace, and observe PSP components, gaining control over your AMD CPU.
Helping WordPress Users Build Climate-Friendly Websites
Learn to create environmentally sustainable WordPress sites with greenerWP's tools, including a scanner, plugin, theme, and guides for solar-powered setups.
Finding 0days in Embedded Systems with Code Coverage Guided Fuzzing
Innovative fuzzing technique for embedded systems, overcoming challenges to discover critical vulnerabilities in network devices through emulation, dynamic binary instrumentation, and guided fuzzing.
Serial Box - Primer for Dealing with Serial and JTAG for Basic Hardware Hacking
Learn essential hardware hacking techniques focusing on Serial and JTAG interfaces. Explore embedded devices, TTL signaling, and tools like OpenOCD for effective device communication and manipulation.
Cisco ASA Episode 2 - Striking Back - Internals and Mitigations
Explore Cisco ASA internals, reverse engineering techniques, and custom tools for exploit development. Gain insights into vulnerability analysis and mitigation strategies for network security professionals.
Secrets Of The Motherboard - Shit My Chipset Says
Explore motherboard intricacies, security features, and hidden functionalities. Uncover potential exploits, design pitfalls, and challenges in hardware security through chipset analysis and datasheet discoveries.
Securing the Internet of Things
Explore IoT security challenges and solutions, covering smart devices, common verticals, technologies, and key vulnerabilities in this comprehensive talk on securing the Internet of Things.
Look at ME! - Intel ME Investigation
Investigación detallada del Intel Management Engine, explorando su funcionamiento, implicaciones de seguridad y desafíos para desarrolladores y investigadores en el análisis de firmware propietario.
Identifying Multi-Binary Vulnerabilities in Embedded Firmware at Scale
Unveiling embedded firmware vulnerabilities through multi-binary analysis. Learn about Karonte, a novel static analysis tool that tracks inter-binary interactions to detect security flaws in IoT devices.
TamaGo - Bare Metal Go Framework for ARM SoCs
Explore TamaGo, an open-source framework for developing pure Go firmware on ARM SoCs, reducing attack surfaces and enabling secure applications without complex OS dependencies.
Intel Management Engine Deep Dive
Explora el Intel Management Engine: arquitectura, firmware, seguridad y desarrollo de un emulador. Análisis profundo de su funcionamiento interno y posibilidades de reemplazo de código abierto.
Smart Vacuum Cleaners as Remote Wiretapping Devices - Easterhegg - 2019
Exploración de vulnerabilidades en aspiradoras inteligentes Neato Botvac Connected, incluyendo extracción de firmware y ejecución remota de código, con implicaciones para la privacidad y seguridad del hogar.
The U.S. Election System, Can We Fix It? Yes We Can! - DefCamp - 2019
Explore vulnerabilities in U.S. election systems and potential solutions, covering voter registration, voting machines, and result reporting. Learn about security measures and the importance of human factors in election integrity.
How I Hacked My City - DefCamp 2016
Explore urban hacking through a real-world case study of Tel Aviv's open WiFi network, uncovering vulnerabilities and demonstrating practical exploitation techniques.
Intel AMT - Using & Abusing the Ghost in the Machine
Explore Intel AMT vulnerabilities and forensics techniques. Learn about potential attacks, mitigations, and non-destructive investigation methods for compromised systems. Gain insights into remote management technology risks.
20 Ways Past Secure Boot
Explore 20 methods to bypass secure boot, including debug access, exploits, timing attacks, glitches, and design flaws. Learn about real-world examples and security implications.