Breaking the Glass Sandbox
Discover techniques to find exploitable Linux kernel bugs in sandboxed environments, learn to identify valuable vulnerabilities, and explore methods for both offensive and defensive security.
A Dirty Little History
Unveiling "Branch History Injection": A new attack bypassing hardware defenses against Spectre-v2. Explore reverse engineering, exploit development, and the latest mitigations in CPU security.
Hacking Toshiba Laptops
Unveiling Toshiba laptop vulnerabilities: BIOS password recovery exploitation and EC firmware signing key extraction, enabling stealth rootkit implantation. Implications for newer models discussed.
Hackable Security Modules - Reversing and Exploiting a FIPS 140-2 Lvl 3 HSM Firmware
Exploring vulnerabilities in Hardware Security Modules (HSMs) through firmware analysis and reverse engineering of the TMS320C64x DSP architecture, with focus on the Utimaco SecurityServer.
A Little Less Conversation, A Little More ActionScript
Techniques for in-depth reverse engineering of Flash, mapping ActionScript to undocumented counterparts, and analyzing vulnerabilities in Adobe Flash Player for improved exploit research.
Hacking the Most Popular Cryptocurrency Hardware Wallets
Explore vulnerabilities in popular cryptocurrency hardware wallets with experts Thomas Roth and Dmitry Nedospasov, uncovering potential security risks and attack vectors.
The Last Generic Win32K KASLR Defeat in Windows
Detailed exploration of Windows kernel security, focusing on KASLR defeats, heap vulnerabilities, and recent changes in RS4. Insights into potential exploits and current Windows KASLR state.
Automotive Security Bugs Explained for Bug Hunters
Explore common automotive security vulnerabilities and learn bug hunting techniques for car systems, from IoT security to CAN bus hacking. Gain insights into PoCs, attacks, and bug prioritization in the automotive industry.
PwdLess - Exploitation Tales from RouterLand
Explore IoT device security through an attacker's perspective, covering fuzzing, reverse engineering, and exploit development. Learn about vulnerabilities, remote execution techniques, and challenges in IoT security.
Security Alarm System - Feeling of Security or Cause for Alarm
Explore vulnerabilities in home security alarm systems, including PIN code sniffing, keypad emulation, and RF attacks. Learn about firmware reverse engineering and its implications for system security.
ElectroVolt - Pwning Desktop Apps Built On Electron
Explore vulnerabilities in Electron-based desktop apps, including novel attack vectors for remote code execution, with demonstrations on popular applications like Discord and VSCode.
How to Bypass AM-PPL & Disable EDRs - A Red Teamer's Story
Explore techniques to bypass Microsoft's AM-PPL technology and disable EDR products, presented by experienced red team leaders. Learn about vulnerabilities in Windows security measures and their potential exploitation.
Careful Who You Trust - Compromising P2P Cameras At Scale
Explore vulnerabilities in P2P protocols used by smart cameras, including Kalay Platform analysis, device-specific exploits, and remote code execution demonstrations. Learn about IoT security risks and mitigation strategies.
Dangling Packages Leading to RCE
Explore dependency confusion attacks and how unclaimed packages in project files can lead to remote code execution. Learn about real-world vulnerabilities and mitigation strategies.
A Hacker Walks Into A Co-Working Space
Explore security vulnerabilities in co-working spaces, including unpatched devices, entry systems, and surveillance cameras. Learn about potential risks and the importance of prioritizing cybersecurity in shared workspaces.
Getting to $10,000 - The Variables at Play in Determining Bounty Awards
Explore factors influencing high-value bug bounty awards with Microsoft's Bug Bounty Program manager, including key strategies for maximizing payouts in cybersecurity research.
Interview with Robert Baptiste aka Elliot Alderson
French security researcher Robert Baptiste discusses Aadhaar data breaches, responsible disclosure, and collaborating with governments to address security issues in this insightful interview at nullcon Goa 2019.
Expanding Exploitation Beyond X86 and ARM
Comparative study of Xtensa architecture for IoT devices, exploring differences from ARM for security researchers. Covers assembly instructions, security mechanisms, gadget searching, and post-boot persistence techniques.
Jailbreak
Explore iOS jailbreaking techniques, security implications, and the latest developments in mobile device exploitation at this cutting-edge conference talk.
Let's Screw with Nmap
Explore a new approach to packet normalization that prevents OS fingerprinting by tools like nmap, enhancing network security and privacy for multiple hosts.
CSRF Finder as a Mozilla Addon
Discover how to create a Mozilla addon for detecting CSRF vulnerabilities in web applications, enhancing your security testing capabilities and web development skills.