Vulnerability Disclosure, Governments and You
Explore vulnerability disclosure's evolution, its impact on policy-making, and the role of governments. Learn about bug bounties, legal considerations, and international efforts in cybersecurity.
Digital Vengeance - Exploiting Notorious C&C Toolkits
Explore techniques for exploiting notorious Remote Administration Tools used in targeted attacks, turning the tables on sophisticated adversaries and exposing vulnerabilities in their command and control systems.
WiFi Exploitation - How Passive Interception Leads to Active Exploitation
Explore WiFi exploitation techniques, from passive interception to active attacks. Learn about device profiling, rogue access points, and MitM attacks. Includes demonstration of a new sensor framework for visualizing 802.11 data.
The Infosec Crossroads
Exploración de la evolución de ataques y defensas en ciberseguridad, abogando por un cambio hacia estrategias de defensa proactivas y basadas en inteligencia para superar las limitaciones de los enfoques reactivos actuales.
Exploit Generation and JavaScript Analysis Automation with WinDBG
Automate exploit generation and JavaScript analysis with WinDBG. Learn techniques for creating exploits from PoC crashes and tracking obfuscated JavaScript without triggering anti-debugging measures.
20 Ways Past Secure Boot
Explore 20 methods to bypass secure boot, including debug access, exploits, timing attacks, glitches, and design flaws. Learn about real-world examples and security implications.
The Three Billion Dollar App
Explore messaging app vulnerabilities, reverse engineering techniques, and security implications in this in-depth analysis of a high-profile data breach and exploit delivery.
Clobbering the Cloud - Part 2
Explore advanced cloud security vulnerabilities, including clickjacking, sharing space issues, and custom language platforms. Learn defensive strategies and future directions in cloud protection.
UI Redressing Attacks on Android Devices
Explore UI redressing attacks on Android devices, including clickjacking and new browserless attacks, along with mitigation techniques for improved mobile security.
I'm in Your Cloud, Reading Everyone's Emails - Hacking Azure AD via Active Directory
Explore Azure AD vulnerabilities, hacking techniques, and security risks in cloud environments. Learn about AD Connect, crypto magic, and service principles to enhance your cybersecurity knowledge.
Hacking Robots Before Skynet
Explore vulnerabilities in collaborative robots, from firmware to physical attacks. Learn about security risks, reverse engineering, and potential solutions in industrial robotics.
Samsung Pay Tokenized Numbers, Flaws and Issues
Explore Samsung Pay's tokenization, security flaws, and potential vulnerabilities in offline mode. Learn about token expiration, social engineering risks, and real-time attack scenarios.
Attacking Nextgen Firewalls
Explore techniques for attacking next-generation firewalls, focusing on administrative interfaces, embedded systems, and potential vulnerabilities in security features like VPNs and user authentication.
Hacking FinSpy - A Case Study
Explore FinSpy hacking techniques, including version analysis, configuration decryption, and network communication interception, in this detailed cybersecurity case study.
Remote Code Execution via Java Native Deserialization
Explore Java deserialization vulnerabilities, focusing on remote code execution through XML and binary deserialization. Learn about CVEs, tools, and future research in this area.
Abusing Bash for Windows
Explore techniques for exploiting Bash on Windows, including remote shells, password extraction, and AppLocker bypasses. Learn about security implications and forensic considerations.
Modmob Tools - Home Made Tools to Test Mobile Devices and Monitor Networks
Explore homemade tools for testing mobile devices and monitoring networks, covering interception techniques, firmware analysis, and hardware auditing for enhanced security understanding.
Doing This One Crazy Thing Will Change Your AppSec Program Forever
Discover how to revolutionize your AppSec program through effective communication, prioritization, and innovative strategies for securing software development.
A Stratagem on Strategy - Rolling Testing into Product Testing
Explore integrating security testing into product testing strategies, enhancing coverage and aligning security with software requirements for more effective quality assurance in the SDLC.
ECOS Offensive Security Research Logbook
Explore eCos RTOS security, from firmware analysis to exploitation and persistence. Learn techniques for cable modem research, including memory corruption, shellcode development, and implant creation.
Tales from Professional Thieves
Professional thieves share insider techniques for bypassing physical security, including sneaking in, fake badges, and social engineering, along with entertaining stories from real-world engagements.