Using Static Binary Analysis to Find Vulnerabilities and Backdoors in Firmware
Explore techniques for detecting vulnerabilities and backdoors in embedded device firmware using static binary analysis, focusing on challenges and automated solutions for complex binary blobs.
Exploiting XXE Vulnerabilities in File Parsing Functionality
Techniques for exploiting XXE vulnerabilities in file parsing, focusing on XML-supported formats like docx and xlsx. Includes real-world examples and introduces a tool for creating 'XXE backdoored' files.
Advanced Windows NT - 2K Security
Explore advanced Windows NT/2K security, including payloads, buffer overflows, and kernel mode injection techniques for enhanced system protection.
Compromising Web Servers and Defensive Techniques
Explore web server vulnerabilities and learn defensive strategies to protect against common attacks and security breaches in this comprehensive cybersecurity presentation.
Getting Rooted and Never Knowing It
Explore advanced hacking techniques and stealthy rootkit deployment methods to understand and defend against sophisticated cyber threats.
Advanced Buffer Overflow Techniques
Explore advanced buffer overflow techniques, including stack injection, heap exploitation, and protection bypassing. Learn about payload crafting, injection vectors, and dynamic function loading.
Researching Secrets, Part 1
Explore techniques for uncovering hidden information and investigating confidential data in Windows systems with expert James Bamford.
Breaking 802.11 WEP
Explore vulnerabilities in 802.11 WEP protocol and learn advanced techniques for breaking wireless network security in this comprehensive cybersecurity presentation.
Smart Card Security
Explore smart card vulnerabilities, attack methods, and security measures in this comprehensive analysis of smart card technology and its potential weaknesses.
Capturing Windows Passwords Using the Network Provider API
Explore techniques for capturing Windows passwords through the Network Provider API, enhancing your understanding of system vulnerabilities and security measures.
Attacking Host Intrusion Prevention Systems
Explore techniques for compromising host intrusion prevention systems, uncovering vulnerabilities and potential attack vectors in cybersecurity defenses.
A Comparison of Buffer Overflow Prevention Implementations and Weaknesses
Comprehensive analysis of buffer overflow prevention techniques, exploring implementations and vulnerabilities to enhance cybersecurity strategies.
When the Tables Turn
Explore cybersecurity tactics and strategies as experts discuss defensive techniques, threat analysis, and emerging trends in information security at this Black Hat conference session.
Discover Vulnerabilities with CodeQL
Explore CodeQL's static and taint analysis capabilities to uncover vulnerabilities, including potential RCE flaws. Learn key concepts for effective code analysis and security testing.
Pentest Story Time - My Favorite Hacks From the Past Year
Engaging tales of successful penetration testing, showcasing diverse attack vectors and vulnerabilities. Highlights include exploiting lack of MFA, IPv6 abuse, and overcoming robust security measures.
How I Got from 0 to MVH - Without Knowing How to Write a Single Line of Python
Discover one hacker's journey from novice to Most Valuable Hacker, exploring tools, resources, challenges, and strategies for success in bug bounty hunting without coding skills.
The Pentester Blueprint - A Guide to Becoming a Pentester
Comprehensive guide to becoming a pentester, covering essential skills, knowledge, and steps for pursuing a career in ethical hacking, based on expert experience and mentorship.
WAF Bypass In Depth
Explore advanced techniques for bypassing Web Application Firewalls (WAFs) and demonstrating the impact of cross-site scripting vulnerabilities, even in the presence of sophisticated security measures.
Defeating the Latest Advances in Script Obfuscation
Explore techniques to defeat advanced script obfuscation, understand why scripts are obfuscated, and learn effective deobfuscation strategies and tools for improved security analysis.
Hacking Lync or The Weakest Lync
Explore vulnerabilities in Microsoft Lync/Skype for Business, learn attack techniques, and discover methods to secure your communications infrastructure.
Rotten Potato Privilege Escalation from Service Accounts to SYSTEM
Explore privilege escalation techniques from service accounts to SYSTEM using the 302 Rotten Potato exploit, including background, updates, and a live demonstration.