A Journey From JNDI-LDAP Manipulation to Remote Code Execution Dream Land
Explore JNDI/LDAP vulnerabilities and exploitation techniques, from basic concepts to advanced remote code execution methods in Java-based enterprise applications.
Hackproofing Oracle EBusiness Suite
Explore vulnerabilities in Oracle eBusiness Suite and learn effective strategies to secure systems against potential attacks, including remote code execution and SQL injection.
Analysis of the Attack Surface of Windows 10 Virtualization-Based Security
Explore Windows 10's virtualization-based security, its implementation details, and potential vulnerabilities. Includes demonstrations of exploits against VBS and firmware, with a focus on platform complexity issues.
Language Properties of Phone Scammers - Cyberdefense at the Level of the Human
Explore forensic linguistics in cybersecurity, analyzing language patterns of phone scammers to enhance human-level defense against social engineering attacks.
Discovering and Exploiting Novel Security Vulnerabilities in Apple ZeroConf
Uncovers critical security flaws in Apple's ZeroConf frameworks, demonstrating vulnerabilities in Multipeer Connectivity, Bonjour, and services like AirDrop, allowing impersonation and man-in-the-middle attacks.
Web Application Firewalls - Analysis of Detection Logic
Explores detection logic in Web Application Firewalls, focusing on regular expressions. Analyzes security flaws in popular WAFs and introduces tools for identifying vulnerabilities in regex patterns.
Viral Video - Exploiting SSRF in Video Converters
Exploiting SSRF vulnerabilities in video converters using HLS playlists, potentially leading to critical security breaches in cloud-based services. Includes demonstration of attacks on major platforms.
Does Dropping USB Drives in Parking Lots and Other Places Really Work?
Explores the effectiveness of USB drive-based attacks through a campus experiment, revealing high success rates and analyzing factors influencing user behavior. Discusses mitigation strategies and demonstrates new tools.
Exploiting IPC With New Desynchronization Primitives
Exploración de vulnerabilidades críticas en SAP, demostrando técnicas avanzadas de explotación HTTP y desincronización para comprometer sistemas empresariales. Incluye demostraciones prácticas y análisis de impacto en la seguridad global.
Advanced DMA Reentrancy Techniques to Escape QEMU
Explore advanced DMA reentrancy techniques for QEMU escape, including DMA Reflection/Refraction and DMA Oriented Programming. Learn about vulnerabilities, exploit processes, and future challenges in virtualization security.
Hunting Windows Desktop Window Manager Bugs
Exploring Windows Desktop Window Manager vulnerabilities, focusing on DirectComposition UserSpace. Covers architecture, attack surfaces, and specific CVEs, offering insights into bug hunting techniques and security implications.
SOHO Hacking at Pwn2Own
Exploring vulnerabilities in home routers and small business devices, detailing methodologies for finding and exploiting security flaws, and demonstrating real-world attack scenarios in SOHO networks.
Syscalls in Shellcode - Techniques for Malicious Functionality
Explore advanced techniques for using Windows syscalls in shellcode, overcoming portability issues, and enhancing malicious functionality. Learn about ShellWasp tool and novel WoW64 syscall invocation methods for stealthy code execution.
Advanced Attack Vectors in Azure Environments
Explore privilege escalation techniques in Azure's integrated ecosystem. Learn core concepts and advanced attack vectors for enhanced cloud security awareness.
Calling All Hacker Heroes - Go Above and Beyond
Inspiring talk on ethical hacking's potential to drive positive change in cybersecurity, encouraging hackers to become heroes by going beyond traditional boundaries and making a meaningful impact.
Upgrading Rollback Agnostic Replay Attacks
Explore car hacking techniques, focusing on radio frequencies and BLE. Learn about Rolling Codes analysis and practical steps to conduct research on vehicle security vulnerabilities.
Hackers vs Auditors
Explore the dynamic between hackers and auditors, examining mindsets, skills, and approaches to cybersecurity. Gain insights into effective IT auditing and hacking techniques.
Teach a Man to Phish
Learn effective phishing techniques, strategies, and tools to enhance cybersecurity awareness and improve organizational defenses against social engineering attacks.
Invasive Roots of Anti-Cheat Software
Explore the intrusive nature of anti-cheat software in gaming, examining its impact on system security and user privacy. Gain insights into the complex balance between game integrity and personal data protection.
Poppin' - Digital Locks
Explore password security vulnerabilities in physical and digital systems, with demonstrations of attack techniques and countermeasures for both mobile and web applications.
Phishing - Going From Recon to Credentials
Learn effective phishing techniques, from reconnaissance to credential harvesting. Explore tools, automation, and the Speed Fishing Framework in this comprehensive overview.