A General Approach to Bypassing Many Kernel Protections and Its Mitigation
Explore a novel exploit technique using elastic objects to bypass kernel protections like KASLR. Learn about this general approach, its implications, and potential mitigation strategies.
Portable Data exFiltration - XSS for PDFs
Explore PDF vulnerabilities and learn how a single HTTP link can compromise PDF contents, exposing security risks in widely-used document formats and generators.
Discovering 20 Year Old Vulnerabilities in Modern Windows Kernel
Explore how legacy components in Windows 10 can harbor decades-old vulnerabilities, focusing on printer drivers and their potential security implications.
Moving from Hacking IoT Gadgets to Breaking into One of Europe's Highest Hotel Suites
Explore tools and methods for hacking BTLE-based mobile phone key systems in hotels, from proof of concept to real-world application. Learn about vulnerabilities in IoT security and their practical implications.
Process Injection Techniques - Gotta Catch Them All
Comprehensive overview of Windows process injection techniques for x64 systems, focusing on medium integrity processes without privilege elevation. Explores various methods and their implications.
All the 4G Modules Could Be Hacked
Explores vulnerabilities in 4G modules, demonstrating methods to probe and exploit weaknesses in car entertainment systems for remote control of vehicles.
No Free Charge Theorem 2.0 - How to Steal Private Information from a Mobile Device Using a Powerbank
Exploiting hidden communication channels in smartphone charging to steal private data, despite Android's "Charging only" mode safeguards. Demonstrates vulnerability in public charging stations and powerbanks.
SirenJack - Cracking a Secure Emergency Warning Siren System
Explore the SirenJack vulnerability affecting emergency warning sirens, its potential impact, and the surprisingly simple methods used to exploit this critical infrastructure weakness.
Breaking Android Kernel Isolation and Rooting with ARM MMU Features
Explore a new Android rooting solution, ReVent, exploiting a Use-After-Free vulnerability in 3.18 Linux kernels. Learn about breaking kernel isolation and ARM MMU features for device security.
Compromising the macOS Kernel through Safari by Chaining Six Vulnerabilities
Explore a Safari exploit chaining six vulnerabilities to compromise the macOS kernel. Learn about offensive security research and browser-based kernel exploitation techniques.
Everybody Be Cool, This Is a Robbery!
Explore attack paths on a major bank HSM, including unauthenticated methods for full control, in this technical presentation targeting high-security solutions.
Escaping Virtualized Containers
Explore container security, focusing on shared kernel vulnerabilities that may allow processes to escape and compromise the host system. Learn about potential risks and mitigation strategies.
BitLeaker - Subverting BitLocker with One Vulnerability
Explore TPM vulnerabilities and their impact on BitLocker encryption, uncovering potential security risks in widely-used commercial devices.
When TLS Hacks You
Explore how TLS features can be exploited for attacks, focusing on Server-Side Request Forgery. Learn about a novel, cross-platform method to leverage TLS for targeting internal services.
Social Engineering
Learn about social engineering from David Hughes in less than an hour with LASCON's online material. Less than hour.
Hacking and Defending iPhone Application
Explore iPhone app vulnerabilities and defense strategies through hands-on demonstrations and practical techniques for securing iOS applications.
Network Attack Collaboration
Explore network attack collaboration techniques with Raphael Mudge. Learn strategies for coordinating and executing effective penetration testing in complex environments.
Hunting Asynchronous Vulnerabilities
Explore techniques for uncovering hidden vulnerabilities in backend systems using exploit-induced callbacks. Learn to detect and exploit asynchronous issues across various technologies and platforms.
Attacking VxWorks - From Stone Age to Interstellar
Explore vulnerabilities in VxWorks, a real-time operating system, from historical exploits to cutting-edge attack techniques. Gain insights into securing critical infrastructure and embedded systems.
Reverse Engineering and Exploiting Font Rasterizers - The OpenType Saga
Explore critical vulnerabilities in OpenType font handling across popular software, revealing potential for arbitrary code execution and bypassing exploit mitigations. Learn about reverse-engineering techniques and in-depth vulnerability analysis.
Stegosploit - Drive by Browser Exploits Using Only Images
Innovative technique encoding browser exploits in images, combining steganography and polyglots for undetectable delivery. Explores implementation, challenges, and implications for cybersecurity.