Building a Damned Good Watch
Cloning a calculator watch with added radio capabilities for Morse code transmission, frequency detection, and remote control signal replication. Includes practical insights and open-source code.
Getting Physical with USB Type-C - Windows 10 RAM Forensics and UEFI Attacks
Explore embedded microcontrollers in modern devices, focusing on the Surface Aggregator Module. Learn about security, firmware updates, and potential hardware implants in this deep dive into low-level system architecture.
Embedded Devices Reverse Engineering
Explore reverse engineering techniques for embedded devices using FreeRTOS. Learn about memory organization, task handling, and security features. Gain insights into automating the process with IDA scripts for efficient firmware analysis.
This Dump is a Puzzle - Reconstructing J2ME Firmware from an Unknown Fragmented File System
Explore techniques for reconstructing embedded Java firmwares from fragmented file systems, developing puzzle-solving algorithms to piece together unknown J2ME fragments.
Baring the System - New Vulnerabilities in SMM of Coreboot and UEFI Based Systems
Unveiling new vulnerabilities in SMM of Coreboot and UEFI systems, exploring impacts, and discussing mitigation techniques. Includes release of CHIPSEC module for automatic detection.
Neurosurgery for Industrial Routers - Security of Sarian OS
Explore vulnerabilities in industrial routers, focusing on Digi WR21 and Sarian OS. Uncover internal workings, network protocols, and security features of critical infrastructure devices.
Hackable Security Modules - Reversing and Exploiting a FIPS 140-2 Lvl 3 HSM Firmware
Exploring vulnerabilities in Hardware Security Modules (HSMs) through firmware analysis and reverse engineering of the TMS320C64x DSP architecture, with focus on the Utimaco SecurityServer.
Reversing and Exploiting Broadcom Bluetooth
Insights into reverse engineering Broadcom Bluetooth firmware, including InternalBlue framework, patching techniques, and discovered vulnerabilities CVE-2018-19860 and CVE-2019-6994.
Fuzzing Embedded - Trusted Operating Systems Using AFL
Explore fuzzing techniques for Trusted Execution Environments using AFL, focusing on OP-TEE. Learn about challenges, coverage tracking, and creating initial inputs for effective embedded system security testing.
LTE and IMSI Catchers - Then and Now
Explore LTE and IMSI catchers' evolution, privacy risks, and security vulnerabilities in mobile networks. Learn about telco attacks, protection measures, and future implications for 5G technology.
Attack Surfaces for 5G Networks
Practical insights into 5G network security, comparing with previous generations. Explores vulnerabilities, implementation differences, and experimental findings. Discusses expectations for the second phase of 5G networks.
Fuzzware - Automating & Scaling Fuzzing For Firmware
Automated firmware testing using Fuzzware: emulate and fuzz embedded systems without hardware. Discover vulnerabilities in network stacks and scale security analysis for diverse devices.
Secure Code Development
Learn secure coding practices for embedded systems in content protection and mobile payments, focusing on real-world asset protection techniques and best practices for software security.
Hardware Badge 101 Desi Jugaad
Explore hardware badge creation using innovative "Desi Jugaad" techniques in this insightful presentation from nullcon Goa 2014, offering practical insights for tech enthusiasts.
Pentesting Proprietary RF Communications
Explore techniques for identifying, assessing, and exploiting proprietary RF communications in control systems, including fire alarms, proximity cards, and building automation systems.
The Year in Which We Cannot Ignore SCADA
Comprehensive analysis of recent SCADA vulnerabilities in industrial control systems, covering root causes, attack vectors, consequences, and remediation strategies for critical infrastructure security.
Securing ICS-SCADA Systems
Explore vulnerabilities in ICS-SCADA systems for critical infrastructure, comparing IT and OT security approaches. Learn from an expert about protecting industrial control systems against sophisticated cyber attacks.
Hacking Automatically - Applying Program Analysis to IoT
Discover how program analysis can uncover vulnerabilities in IoT devices. Learn about firmware analysis challenges, memory corruption patterns, and see 20 real-world examples of security flaws identified through automated techniques.
Hardware Backdooring is Possible
Demonstration of permanent hardware backdooring using Rakshasa malware, exploring BIOS vulnerabilities and implications for computer security and forensics practices.
DIY ARM Debugger for Wi-Fi Chips
Explore DIY ARM debugging for Wi-Fi chips using Nexmon framework. Learn to set breakpoints, handle debugging events, and perform single-step debugging on Cortex-R4 microcontrollers in FullMAC Wi-Fi firmwares.
LIA Aerospace y lo que siempre quisiste saber de rocket science
Dan Etenberg comparte su experiencia en LIA Aerospace, abordando temas de ingeniería aeroespacial, desarrollo de sistemas de propulsión y el futuro de la industria en Latinoamérica.