Fixing the Internet's Auto-Immune Problem - Bilateral Safe Harbor for Good-Faith Hackers
Exploring legal protections for ethical hackers, advocating for standardized Safe Harbor language in vulnerability disclosure programs to encourage cybersecurity collaboration without legal risks.
Recreating an iOS 0-Day Jailbreak Out of Apple's Security Updates
Detailed walkthrough of recreating an iOS jailbreak from security updates, covering vulnerability discovery, exploit development, and jailbreak creation. Includes practical demonstration and insights.
A Pre-Auth RCE on Leading SSL VPNs
Unveiling critical vulnerabilities in leading SSL VPNs, including pre-auth RCEs and backdoors. Demonstrating exploitation techniques, post-exploitation strategies, and discussing mitigation measures for enterprise security.
Car Hacking Made Easel
Demonstrating a systematic approach to reverse engineer and exploit car systems through CAN bus communication protocol analysis, packet spoofing, and payload crafting within a month-long prototype build.
Hacking and Forensics on the Go
Explore mobile hacking and forensics techniques using BeagleBoard. Learn platform selection, OS building, compilation methods, and hardware accessories for on-the-go security operations.
The Ethics of Prosecuting an Offensive Security Campaign
Explore ethical considerations in offensive security campaigns, including impacts on company morale, deception tactics, and maintaining professional integrity. Learn best practices for conducting ethical red team engagements.
Deconstructing DeFeNeStRaTe.C
Dive into mainframe security with an analysis of DeFeNeStRaTe.C, exploring privilege escalation, APF unix programs, buffer overflows, and ACEE manipulation on IBM z/OS systems.
IOT RCE - A Study With Disney
Explore IoT device vulnerabilities using Disney's Circle and Foscam as case studies. Learn novel attack techniques, including SSL bypasses, SSID injection, and cloud routing abuse. Discuss IoT devices' use of offensive tools.
Designing and Executing the First All Computer Hacking Competition
Explore the creation and implementation of the pioneering all-computer hacking competition, discussing challenges, strategies, and insights from the organizers' experience.
CoreOS Arbitrary Code Execution
Explore CoreOS vulnerabilities and arbitrary code execution techniques with insights from security experts Brian Redbeard and Patrick Baxter in this Shmoocon 2017 presentation.
Hacking ICS Devices for Fun
Exploración práctica de vulnerabilidades en dispositivos de sistemas de control industrial, destacando técnicas de hacking y medidas de seguridad en el contexto de la conferencia DefCamp 2019.
Breaking Smart - Hacking Health, Wearable and Smart Apps to Prevent Leaking
Explore vulnerabilities in health and wearable apps, focusing on data leakage prevention. Learn techniques to secure smart devices and protect sensitive information.
Weaponizing Neural Networks - In Your Browser
Explore the potential of weaponizing neural networks directly in web browsers, examining cutting-edge techniques and implications for information security and ethical hacking.
Backdooring DVR - NVR Devices
Exploración detallada de técnicas para comprometer dispositivos DVR/NVR, revelando vulnerabilidades y métodos de ataque en sistemas de videovigilancia en una charla técnica de ciberseguridad.
Social Engineering - Security Through Education
Explore social engineering techniques and learn how education can enhance security measures. Gain insights into protecting against manipulation and unauthorized access in information security.
Pentesting Android Applications
Aprenda técnicas avançadas de pentesting para aplicativos Android, explorando vulnerabilidades e métodos de segurança em uma palestra prática da conferência DefCamp.
Hacking and Securing Network Monitoring Systems
Explore techniques for hacking and securing network monitoring systems in this DefCamp conference talk, focusing on the latest research and practices in information security.
Penetration Testing - 7 Deadly Sins
Explore common pitfalls in penetration testing and learn how to avoid them. Gain insights into best practices for effective security assessments and vulnerability detection.
How to Breach Vendor's Network Using EV Charging Station
Explore vulnerabilities in EV charging stations and potential network breaches, highlighting cybersecurity risks in emerging technologies.
Weaponized RaspberryPi in Red Team Engagements
Explore weaponized RaspberryPi techniques for red team engagements, enhancing your offensive security skills and understanding of advanced penetration testing methods.
SE Exploit by Improvisación
Exploración de técnicas de ingeniería social y explotación de vulnerabilidades mediante improvisación en ciberseguridad, presentado en DefCamp 2016.