Jump into IOT Hacking with Damn Vulnerable Habit Helper IOT Device
Explore IoT hacking techniques using a vulnerable device in this hands-on session, covering security vulnerabilities and practical exploitation methods.
Oops Was That Your Pacemaker - Charles Parker II
Explore the vulnerabilities of medical devices and the potential risks to patient safety in this eye-opening talk on cybersecurity in healthcare.
Stealing Domain Admin or How I Learned to Stop Worrying and Love the CSSF
Explore techniques for compromising domain admin privileges, including social engineering, password spraying, and hash attacks. Learn defensive strategies and the importance of system hardening.
Inhumane - Making Security Hard on Criminals, Easy on Everyone Else
Explore strategies for enhancing security measures that deter criminals while maintaining user-friendliness, balancing protection and accessibility in cybersecurity systems.
The Science of Breaking and Entering
Explore the intricacies of physical security breaches and learn techniques for unauthorized entry in this comprehensive examination of breaking and entering methodologies.
Understanding How Public Places Introduce Additional Risks to Business - Len Noe
Explore public space cybersecurity risks for businesses, covering captive portals, QR codes, and physical attacks. Learn defensive strategies and awareness techniques.
Game of Chromes - Owning the Web with Zombie Chrome Extensions
Explore how malicious Chrome extensions can create botnets, distribute themselves, and exploit vulnerabilities. Learn about attack patterns, extension capabilities, and security measures.
Free-Fall - Hacking Tesla from Wireless to CAN Bus
Detailed exploration of Tesla's security vulnerabilities, from wireless attacks to CAN bus access, including Tesla's response and new mitigation strategies.
Network Attached Shell - N.A.S.ty Systems that Store Network Accessible Shells
Explore critical vulnerabilities in network storage devices, their impact on data security, and implications for network infrastructure. Learn about attack methods and the importance of robust security measures.
Researching Android Device Security with the Help of a Droid Army
Explore Android device security using a diverse cluster to tackle fragmentation, enhance auditing, and improve exploit development techniques.
Android FakeID Vulnerability Walkthrough
Explore Android's FakeID vulnerability, its impact on device security, and learn how to detect and mitigate risks through technical analysis and live demonstrations.
Write Once, Pwn Anywhere
Explore advanced Windows exploitation techniques, including DEP and ASLR bypass methods, for enhanced system penetration. Learn OS-independent strategies for more effective and versatile attacks.
Thinking Outside the Sandbox - Violating Trust Boundaries in Uncommon Ways
Explore uncommon techniques for bypassing browser sandboxes, focusing on four successful Pwn2Own contest entries. Learn about innovative attack vectors and their implications for application security.
Digging for IE11 Sandbox Escapes Part 1
Explore IE11 sandbox vulnerabilities, focusing on logic bugs and Enhanced Protected Mode. Learn techniques to investigate, analyze, and exploit sandbox weaknesses in Windows 8.1.
The Beast is in Your Memory
Explore advanced exploitation techniques and control-flow integrity mechanisms. Learn about Return-Oriented Programming, its countermeasures, and how to bypass emerging CFI solutions.
Digging for IE11 Sandbox Escapes Part 2
Explore IE11 sandbox vulnerabilities, focusing on logic bugs and Enhanced Protected Mode. Learn to investigate, analyze, and exploit sandbox escapes discovered during a bug bounty program.
Smart Nest Thermostat - A Smart Spy in Your Home
Explore security vulnerabilities in Nest thermostats, including hardware-level attacks and potential for remote exploitation. Learn about risks to privacy and home security posed by compromised smart home devices.
Contemporary Automatic Program Analysis
Explore automatic program analysis techniques for vulnerability discovery, from historical context to cutting-edge methods, with practical examples and demos for effective security research.
Call to Arms - A Tale of the Weaknesses of Current Client-Side XSS Filtering
Uncovers 17 flaws in Chrome's XSS Auditor, demonstrating bypasses and presenting a tool for generating attacks. Analyzes filter effectiveness against real-world vulnerabilities, proposing future improvements.
SATCOM Terminals - Hacking by Air, Sea, and Land
Exposé des vulnérabilités critiques dans les terminaux de communication par satellite, permettant des attaques à distance sur les systèmes maritimes, aériens et terrestres. Démonstration technique incluse.
The Defense Rests - Automation and APIs for Improving Security
Explore automation and APIs for enhancing security through centralized management, testing, and evidence-driven approaches. Learn to leverage open-source tools and protocols for efficient vulnerability detection and faster recovery.