I Hunt TR-069 Admins - Pwning ISPs Like a Boss
Exploring TR-069/CWMP vulnerabilities in residential gateways and ACS software, demonstrating potential for mass exploitation of consumer devices through ISP management systems.
Spear Phishing - From Linkedin To Loggedin
Explore the rise of spear phishing, learn to identify vulnerable targets through social media, and discover effective protection strategies for individuals and organizations.
Hacking the Drones
Explore drone security vulnerabilities, hacking techniques, and GPS spoofing methods. Learn about UK drone laws and differences between private and military drones.
Introducing Pi-Key - Hacking Just Like the Movies
Discover Pi-Key: a £20 Raspberry Pi Zero device that steals Windows credentials, cracks them, and unlocks machines in under 60 seconds. Learn how it works, its components, and build your own.
The Hip Hacker's Guide to Policy
Explore cybersecurity policy with experts, discussing key issues, trends, and strategies for effective advocacy in the rapidly evolving digital landscape.
How to Succeed as a Freelance Pentester
Discover strategies for thriving as an independent penetration tester, including building a client base, managing projects, and navigating the challenges of freelance cybersecurity work.
Cracking Passwords for Good, Bad & Commercial Purposes - Second Thoughts on Password Cracking
Explore ethical considerations and practical applications of password cracking techniques, examining their use for security, malicious intent, and commercial purposes.
Hackers vs. Testers - A Comparison of Software Vulnerability Discovery Processes
Explore the processes, skills, and challenges of software testers and white-hat hackers in identifying security vulnerabilities, based on a comparative study of 25 professionals.
Users Really Do Answer Telephone Scams
Explores factors influencing susceptibility to telephone scams through ethical phishing experiments, revealing the significant impact of spoofed Caller ID on victims' willingness to disclose sensitive information.
Exploit the Last Straw That Breaks Android Systems
Uncover vulnerabilities in Android systems through advanced exploitation techniques, focusing on critical weaknesses that can compromise device security and user data.
BadUSB-C - Revisiting BadUSB with Type-C
Explore the evolution of BadUSB attacks with USB Type-C, examining new vulnerabilities and potential security risks in modern devices. Learn about cutting-edge offensive technologies and their implications.
Deine Software, die Sicherheitslücken und ich
Verantwortungsvoller Umgang mit Sicherheitslücken: Entdeckung, Meldung und rechtliche Aspekte. Einblicke in Responsible Disclosure und Best Practices für Unternehmen beim Umgang mit gemeldeten Schwachstellen.
The Weakest Link
Sicherheitslücken in Mobilfunk-Webapps ermöglichen Angreifern Rufumleitungen und Kontoübernahmen durch einfache Newsletter-Links. 40% der österreichischen Nutzer waren 2020 betroffen.
The Past, Present, and Future of Cross-Site - Cross-Origin Request Forgery
Explore the evolution of Cross-Site Request Forgery attacks, their impact on applications, and effective defense strategies for both traditional and API-based systems.
Violent Ruby - A Talk for Hackers, Forensic Analysts, Penetration Testers, and Security
Explore Ruby programming for hacking, forensics, and security testing. Learn techniques for penetration testing and digital forensics using Ruby's powerful capabilities.
Microsoft Patch Analysis for Exploitation
Explore techniques for analyzing Microsoft patches to identify vulnerabilities and potential exploitation methods, enhancing your cybersecurity skills.
Red Teaming the Board
Explore red teaming strategies for effective board communication, enhancing cybersecurity awareness and decision-making at the executive level.
I Went Phishing and Caught a Charge - Maryland Law for Pentesters
Explore legal implications of penetration testing in Maryland, focusing on phishing and cybersecurity laws. Learn crucial insights for ethical hacking and compliance.
When Molehill Vulnerabilities Become Mountainous Exploits
Explore how seemingly minor vulnerabilities can escalate into major security threats, with insights on identifying and mitigating potential risks in cybersecurity systems.
Discussion of the Legality of Wardriving
Explore the legal implications and ethical considerations of wardriving in this thought-provoking discussion from PhreakNIC 12, delving into privacy, security, and technology ethics.
Jumping the Fence - Comparison and Improvements for Existing Jump Oriented Programming Tools
Explore Jump Oriented Programming, comparing tools and discussing improvements. Covers gadget search, comprehension strategies, and architecture support for various platforms including ARM and AVR.