Fuzzing - Finding Your Own Bugs and 0days
Aprenda a criar e usar um fuzzer para encontrar bugs e vulnerabilidades, incluindo técnicas para escrever exploits e obter acesso a sistemas. Demonstrações práticas incluídas.
The Road Towards 365 Bugs in Microsoft Office 365
Discover vulnerabilities in Microsoft 365 applications, including cross-tenant privacy leaks, SQLi, CSRF, SSRF, and XSS. Learn bug hunting techniques and tips for testing new Office 365 features.
Jailbreaks Never Die - Exploiting iOS 13.7
Unveiling iOS 13.7 exploit chain: kernel vulnerabilities, mitigation bypasses, and techniques for reading/writing kernel memory. Insights into iOS security research and jailbreak development.
Hacking Yachts Remotely - IoT Hacking At Sea
Explore vulnerabilities in yacht IoT systems and learn techniques for remote hacking of maritime vessels, uncovering potential security risks at sea.
NFC Payments - The Art of Relay and Replay Attacks
Explore NFC payment vulnerabilities, including relay and replay attacks. Learn about hardware, software, and techniques used to exploit NFC transactions and tokenization processes.
Viewer Discretion Advised - Decoding an iOS Vulnerability
Uncover a hidden iOS vulnerability in the video-decoder driver, exploitable from sandboxed processes. Learn techniques for finding and exploiting complex mobile security flaws in closed-source environments.
Software Security Era - Past, Present, and Future
Explore the evolution of memory corruption exploitation, from early techniques to modern mitigations. Includes live demos of vulnerabilities and discusses the ongoing challenges in software security.
Automatic Generation of ROP Chains
Introduces EasyROP, a tool for automating ROP attacks by finding gadgets in binary files. Analyzes Windows libraries for attack feasibility and demonstrates a real-world application on CVE-2010-3333.
Chasing Cars - Keyless Entry System Attacks
Explore vulnerabilities in keyless entry systems for vehicles, including attack methods and potential security improvements for automotive manufacturers.
Everybody Wants SOME - Advance Same Origin Method Execution
Explore advanced Same Origin Method Execution attacks, demonstrating real-world vulnerabilities and new approaches to exploit callback endpoints across major platforms.
Car Hacking Virtual Lab
Explore vehicle architecture, CANbus protocol, CAN frames, and car hacking tools in this hands-on virtual lab. Learn from experts in automotive security and gain practical skills in vehicle system penetration testing.
Reputation Systems Against Social Engineering
Explore innovative reputation systems to combat social engineering and opinion manipulation in online environments, enhancing security for individuals and organizations.
Attacking Industrial Remote Controllers
Exploring vulnerabilities in industrial RF remote controllers, revealing security flaws and potential attacks. Includes demos, findings, and recommendations for improving safety in IIoT applications.
Automated Discovery of Logical Privilege Escalation Bugs in Windows 10
Automated discovery of logical privilege escalation vulnerabilities in Windows 10 services, using simulated user interactions and interface calls. Includes methodology, ALPC analysis, and system implementation.
For The Win - The Art of the Windows Kernel Fuzzing
Explore advanced Windows kernel fuzzing techniques, including a new method and custom tool for discovering vulnerabilities in kernel objects and their relationships.
Might As Well JUMP - Exploit Development For Java Serialization
Explore Java serialization exploit development, including 0day custom exploits, reverse engineering, and ROP techniques. Learn to break HMAC/MAC and create Python exploits for educational purposes.
Hacking Telephone Systems For Fun & Profit
Explore techniques for exploiting vulnerabilities in telephone systems, uncovering potential security risks and methods for unauthorized access in this eye-opening presentation.
Hunting for Backdoors in IoT Firmware at Unprecedented Scale
Explore advanced techniques for detecting hidden vulnerabilities in IoT firmware at scale, enhancing cybersecurity practices for the rapidly expanding Internet of Things ecosystem.
Creating Browser Extensions to Hunt for Low-Hanging Fruit
Learn to create browser extensions for identifying security vulnerabilities, focusing on low-hanging fruit and efficient hunting techniques.
IPv6 Insecurity Revolutions
Explore IPv6 security vulnerabilities and auditing techniques with Marc Heuse. Learn about new attack vectors and tools for penetration testing in IPv6 networks.
Open Bottle - Security Industry Panel Discussion
Security experts discuss industry trends, vulnerabilities, and ethical hacking in an open panel. Topics include fuzzing, e-commerce security, IPv6 research, and experiences from diverse cybersecurity backgrounds.