Malicious File for Exploiting Forensic Software
Exploiting vulnerabilities in forensic software file viewers through malicious files, demonstrating code execution and DoS attacks. Includes fuzzing techniques, vulnerability analysis, and countermeasures.
The Web Is Vulnerable - XSS Defense on the BattleFront
Comprehensive analysis of real-world XSS vulnerabilities and attacks, presenting advanced protection methods and introducing detectXSSlib, a new tool for real-time XSS detection.
An Introduction to SPIKE
Explore SPIKE, a powerful fuzzing tool for discovering software vulnerabilities. Learn its applications, techniques, and potential impact on cybersecurity testing and exploit development.
Phreaking and PBX Tricks
Explore advanced techniques in phone system manipulation and PBX exploitation, uncovering vulnerabilities and learning ethical hacking methods for telecommunications security.
Over the Router, Through the Firewall, to Grandma's House We Go
Cross-platform hack demonstration showcasing network penetration techniques, traversing routers and firewalls to access sensitive corporate data using multiple hosts and visual aids.
DropSmack - How Cloud Sync Services Render Your Corporate Firewall Worthless
Explore cloud sync services' security risks, including malware delivery, command and control channels, and data exfiltration. Learn detection strategies and see live demonstrations of potential vulnerabilities.
Owning Anti-Virus - Weaknesses in a Critical Security Component
Explore critical vulnerabilities in anti-virus software, uncovering weaknesses that could compromise system security and discussing potential exploitation techniques.
Advanced SQL Injection in Oracle Databases
Explore advanced SQL injection techniques in Oracle databases, focusing on vulnerabilities, exploitation methods, and defensive strategies for database security professionals.
Here Be Backdoors - A Journey into the Secrets of Industrial Firmware
Exploring vulnerabilities in industrial control systems through firmware analysis, revealing backdoors and security flaws in critical infrastructure devices like PLCs, smart meters, and SCADA systems.
How Many Bricks Does It Take to Crack a Microcell
Journey through reverse engineering a 3G microcell, covering hardware hacking, kernel reversing, firmware manipulation, software reversing, networking, memory forensics, and social engineering. Insights into successes, failures, and lessons learned.
Hacking the Corporate Mind - Using Social Engineering to Improve Organizational Security Acceptance
Discover social engineering techniques to improve organizational security acceptance, bridging the gap between users and InfoSec teams for better awareness and policy adherence.
PinPadPwn
Explore vulnerabilities in payment terminals, including memory corruption issues and potential attack vectors. Learn about code execution risks and discuss profitable payloads for attackers.
Windows Phone 7 Internals and Exploitability
Comprehensive analysis of Windows Phone 7 security, revealing hidden internals through reverse engineering. Explores potential vulnerabilities and exploitation techniques in the OS and vendor customizations.
SSRF vs Business Critical Applications
Explore SSRF vulnerabilities in business-critical applications, focusing on SAP systems. Learn about XXE Tunneling and its potential to bypass security restrictions, with practical examples and attack scenarios.
Mission mPOSsible
Explore vulnerabilities in mobile payment systems, including code execution through various input vectors. Live demonstrations showcase attack methods, emphasizing security weaknesses in current mPOS solutions.
Breaking the Security of Physical Devices
Explore vulnerabilities in everyday devices like cars and home alarms. Learn about eavesdropping, replay attacks, and code analysis techniques to understand and mitigate security risks in physical systems.
Abusing the Internet of Things - Blackouts, Freakouts, and Stakeouts
Explore IoT vulnerabilities in smart devices like Hue lights, baby monitors, and Tesla cars. Learn about potential security risks and future malware threats in connected technologies.
Disasters in the Making - How I Torture Open Government Data Systems for Fun, Profit, and Time Travel
Explore techniques for exploiting vulnerabilities in open government data systems, uncovering potential risks and implications for security, privacy, and data integrity.
PDF Attack - A Journey From the Exploit Kit to the Shellcode Part 1
Explore the intricacies of PDF-based attacks, from exploit kits to shellcode execution, in this comprehensive cybersecurity analysis by Jose Miguel Esparza.
PDF Attack - A Journey From the Exploit Kit to the Shellcode Part 2
Explore advanced PDF exploitation techniques, from exploit kits to shellcode execution, with expert insights on vulnerabilities and attack vectors.
Ultimate Dom Based XSS Detection Scanner on Cloud
Learn advanced techniques for detecting DOM-based XSS vulnerabilities using cloud-based scanning tools, enhancing web application security.