Smart Muttering - A Story and Toolset for Smart Meter Platform
Explore smart meter security vulnerabilities and a new open-source framework for embedded device analysis. Learn about critical infrastructure risks and tools for assessing obscure networks and protocols.
Leverage One-shot UAF to a Minigun
Exploración de técnicas avanzadas de explotación de vulnerabilidades Use-After-Free en Adobe Flash, incluyendo el método UAUAF para obtener acceso completo a la memoria y ejecución de código arbitrario.
Exploiting 64 Bit IE on Windows 8.1 - The Pwn2Own Case Study
Detailed exploration of vulnerabilities and exploit techniques used to compromise 64-bit Internet Explorer on Windows 8.1, including ASLR & CFG bypass and sandbox escape, as demonstrated at Pwn2Own 2015.
Responsible Disclosure - Who Cares
Explore real-world experiences of security researchers attempting responsible disclosure, highlighting challenges, vendor responses, and lessons learned in vulnerability reporting.
PinPadPwn
Explore vulnerabilities in payment terminals, including memory corruption and code execution risks. Learn about attack surfaces, research approaches, and potential payloads in chip-and-pin systems.
I'm the Guy Your CSO Warned You About
Explore modern social engineering tactics and tools used by cybercriminals, with live demonstrations and practical defense strategies for individuals and organizations.
Kill All Humans - Bugs - Machine Learning to the Rescue of Code Review
Explore machine learning techniques for efficient security code reviews, reducing false positives and automating vulnerability classification in large-scale applications.
Ghost in the Locks - Owning Electronic Locks without Leaving a Trace
Explore the decade-long journey to bypass widely-used electronic locks without a trace, uncovering vulnerabilities in hotel security systems and their far-reaching implications.
See No Evil, Hear No Evil - Hacking Invisibly and Silently with Light and Sound
Explore innovative hacking techniques using light and sound for C2 channels, exfiltration, and exploitation. Learn about bypassing security protections and defending against these novel attack methods.
Cracking HiTag2 Crypto - Detailed Look at the Academic Attacks
Detailed exploration of HiTag2 RFID technology, including authentication protocols and encryption. Implements and demonstrates academic attacks for key recovery and tag cloning.
The Internet of Us
Explore the evolving landscape of IoT security, challenging industry norms and emphasizing the need for new approaches to protect businesses and consumers in the interconnected world.
I'm The Butcher, Would You Like Some Beef?
Explore cutting-edge cybersecurity insights with Thomas Mackenzie and Michele Orru as they delve into advanced techniques and strategies for protecting digital assets and networks.
Windows Pwn 7 OEM - Owned Every Mobile?
Explore Windows 7 vulnerabilities and mobile device security with expert Alex Plaskett. Gain insights into potential exploits and learn strategies for protecting OEM systems.
Practical AppSec - Quick Wins for More Secure Software
Practical steps to enhance application security with minimal effort, including quick wins, finding attack surfaces, and engaging developers. Introduces a software security maturity model for measuring progress.
How I Met Your Girlfriend
Explore social engineering techniques and privacy vulnerabilities in popular platforms with hacker Samy Kamkar's revealing presentation on digital security risks.
Automate Security Tests for APIs with Syntribos - An Open Source Security Scanner
Explore Syntribos, an open-source automated security scanner for RESTful APIs. Learn its design, configuration, and capabilities to detect vulnerabilities like SQL injection and DoS attacks efficiently.
HeapLab Taster - GLIBC Heap Exploitation
Dive into GLIBC heap exploitation techniques with expert Max Kamper. Learn advanced memory corruption strategies and enhance your cybersecurity skills in this intensive session.
Introduction to GLIBC Heap Exploitation
Explore GLIBC heap exploitation techniques with expert Max Kamper. Learn essential concepts, attack vectors, and practical strategies for identifying and exploiting heap vulnerabilities in Linux systems.
Owning the Cloud Through SSRF
Explore cloud security vulnerabilities through SSRF attacks, focusing on metadata exploitation, CVE examples, and advanced techniques like DNS rebinding for comprehensive cloud protection.
Ghosts of XSS Past, Present and Future
Comprehensive exploration of Cross-Site Scripting vulnerabilities, examining historical trends, current threats, and future challenges in web application security.
Pentesting NoSQL DB's Using NoSQL Exploitation Framework
Explore NoSQL database vulnerabilities and exploitation techniques for MongoDB, CouchDB, and Redis using the NoSQL Exploitation Framework. Learn about injection attacks, security issues, and automated penetration testing methods.