Innovative Approaches to Exploit Delivery
Innovative techniques for delivering exploits, combining research in exploit writing, browser and PDF exploitation, web hacking, and data representation. Includes demos of creative methods like "Javascript chameleons" and "exploitation by painting".
Hackers the Movie - A Retrospective
Análisis retrospectivo de las técnicas de hacking mostradas en la película "Hackers", demostrando su relevancia actual y cómo se pueden implementar con tecnología moderna de bajo costo para eludir controles de seguridad.
RedPhishing - Wi-Fi, Phishing and Red Teaming
Explore new techniques for attacking corporate WiFi networks during physical red teaming engagements, including evil twin attacks and exploiting OS trust in certificates. Learn about risks and protective measures.
Attacking Software Tokens
Exploring vulnerabilities in software OTP tokens, demonstrating reverse engineering techniques and exploits for major vendors' tokens, and assessing obfuscation effectiveness.
Targeted Attacks in Asia
Evolution of politically motivated targeted malware attacks in Asia over five years. Analysis of attack campaigns against human rights groups, media, and political parties, revealing overlaps and shifts in tactics. Discussion on countermeasures and futur…
Advanced SOHO Router Exploitation
Explore advanced techniques for exploiting SOHO routers, including firmware analysis, vulnerability discovery, and ARM/MIPS exploit development. Learn about 0-day vulnerabilities and post-exploitation concepts for household routers.
Treble or Trouble - Where Android's Latest Security Enhancements Help And Where They Fail
Explore Android's security enhancements, focusing on Project Treble's impact. Analyze SELinux, Stagefright, and MediaDrmServer vulnerabilities to understand where improvements succeed or fall short.
Cross Platform Metasploit Payloads
Explore cross-platform Metasploit payloads for enhanced penetration testing capabilities. Learn techniques to create versatile and effective payloads across multiple operating systems.
Breaking Web3 - Exploitation Techniques for Cryptocurrency Hacking
Exploration of common vulnerabilities in Web3 projects, covering blockchain topology, node exploitation, DoS attacks, social engineering, and smart contract vulnerabilities in cryptocurrency systems.
One-Click to Completely Takeover a MacOS Device
Explore vulnerabilities in MacOS security features and learn how to bypass them for a one-click takeover of both Apple Silicon and Intel Mac devices. Includes live demo and expert insights.
Exploiting a Limited UAF on Ubuntu 22.04 to Achieve LPE
Detailed exploration of exploiting a Linux kernel vulnerability in Ubuntu 22.04 to achieve local privilege escalation, focusing on advanced exploitation techniques and bypass methods.
E'rybody Gettin' TIPC - Demystifying Remote Linux Kernel Exploitation
Demystifying remote Linux kernel exploitation through a stack overflow vulnerability in a network module, offering insights into the exploit development process and low-level kernel internals.
Attacking WPA3 - New Vulnerabilities And Exploit Framework
Uncovers critical vulnerabilities in WPA3, including DoS attacks and traffic interception. Presents a new Wi-Fi testing framework for researchers to identify and exploit these weaknesses in various devices.
Building an Army of Bots by Hijacking a Twitter Handle
Revealing security vulnerabilities in mobile apps that expose Twitter API keys, allowing potential account takeovers and unauthorized actions. Explores causes, impacts, and prevention techniques.
Squashing Low-hanging Fruit in Embedded Software
Discover advanced techniques for identifying and mitigating critical vulnerabilities in embedded systems, focusing on NicheStack TCP/IP stack vulnerabilities and automated vulnerability detection methods.
A QEMU Black Box Escape Via USB Device
Exploring a QEMU virtual machine escape technique using USB device vulnerabilities, focusing on black box scenarios without prior system information for enhanced cloud security.
Breaking Korea Transit Card with Side-Channel Attack - Unauthorized Recharging
Unveiling vulnerabilities in Korea's transit card system through side-channel attacks, demonstrating potential financial risks and the need for enhanced smartcard security measures.
BLEEDINGBIT - Your APs Belong to Us
Explore zero-day vulnerabilities in BLE chips, allowing unauthenticated network penetration. Learn about BLEEDINGBIT, its impact on enterprise APs, and potential attack scenarios.
SirenJack - Cracking a 'Secure' Emergency Warning Siren System
Uncover the SirenJack vulnerability affecting emergency warning systems, exploring how a simple setup can compromise critical infrastructure and discussing potential security implications.
Scavenger - Misuse Error Handling Leading to Qemu - KVM Escape
Explore how mishandled error codes in hypervisors can lead to security vulnerabilities, including guest-to-host escape exploits in Qemu/KVM environments.
The Rise of Potatoes - Privilege Escalations in Windows Services
Explore recent privilege escalation techniques in Windows services, focusing on methods attackers use to gain full system control from lower-privileged access.