Just-In-Time Code Reuse - The More Things Change, the More They Stay the Same
Explore advanced exploit techniques undermining fine-grained ASLR through just-in-time code reuse, demonstrating real-world applications and implications for cybersecurity defenses.
The Outer Limits - Hacking the Samsung Smart TV
Explore vulnerabilities in Samsung Smart TVs, including remote hijacking, userland rootkits, and surveillance capabilities. Learn about attack surfaces, security flaws, and potential fixes for smart platforms.
Hacking Like in the Movies - Visualizing Page Tables for Local Exploitation
Visualizing page tables to break ASLR and find vulnerabilities across operating systems. Includes an Android ASLR bypass and insights for Windows, Linux, and iOS.
What Security Researchers Need to Know About Anti-Hacking Law
Explore legal risks for security researchers under the Computer Fraud and Abuse Act, including key cases, implications, and strategies to avoid legal trouble in cybersecurity work.
New Optimization and Obfuscation Techniques
Advanced SQL injection techniques for bypassing firewalls and intrusion detection systems, including optimization methods and the Leapfrog framework for testing security measures.
Abusing Web APIs Through Scripted Android Applications
Exploiting Android app vulnerabilities to abuse web APIs, using JRuby for scripting and Burp Suite for testing. Demonstrates attacks bypassing security measures and exposes potential weaknesses in mobile app ecosystems.
Dissecting CSRF Attacks & Countermeasures
Explore CSRF attacks, current countermeasures, and a proposed header-based policy for improved web security. Learn detection techniques and a new concept called Storage Origin Security for simplified protection.
Maltego Tungsten as a Collaborative Attack Platform
Explore real-time collaborative intelligence gathering and attack integration using Maltego Tungsten. Learn to leverage shared graphs for effective team-based penetration testing and target profiling.
Are You My Type? Breaking .NET Sandboxes Through Serialization
Explore vulnerabilities in .NET serialization, including attacks on applications and sandbox breakouts. Learn about security issues, mitigation strategies, and the impact on .NET technologies.
AMF Testing Made Easy
Reshaping AMF fuzzing with automated gray-box testing. Learn to build custom AMF messages, dynamically generate objects, and improve fuzzing coverage for complex applications using the Blazer Burp Suite plugin.
Exploiting Network Surveillance Cameras Like a Hollywood Hacker
Explore 0-day vulnerabilities in network surveillance cameras, learn how to exploit them for administrative access, and witness a Hollywood-style video stream manipulation demonstration.
Honey, I'm Home! - Hacking Z-Wave Home Automation Systems
Explore vulnerabilities in Z-Wave home automation systems, including protocol analysis, key extraction, and potential attack vectors. Learn about security implications for smart home devices and networks.
Clickjacking Revisited - A Perceptual View of UI Security
Explores UI security vulnerabilities from a perceptual perspective, presenting novel attacks that bypass current defenses and discussing potential countermeasures and their limitations.
Multiplexed Wired Attack Surfaces
Explore techniques for accessing mobile device interfaces through multiplexed wired connections, including gaining shell access and using open-source tools for interface exploration.
SQL Security Revisited
Explore SQL Server security, from authentication modes to vulnerabilities. Learn about target acquisition, privilege escalation, and SQL injection techniques for better defense strategies.
Falling Dominoes
Explore Windows security vulnerabilities and attack techniques in this comprehensive Black Hat presentation, focusing on exploiting system weaknesses and understanding potential threats.
Cops and Robbers - Cheating Las Vegas
Explore the intriguing world of casino cheating and countermeasures in Las Vegas, uncovering techniques used by both criminals and law enforcement to outsmart each other.
Falling Dominoes Pt. 2
Explore advanced Windows security vulnerabilities and exploitation techniques in this in-depth technical presentation from Trust Factory at Black Hat.
WhiteHat Trick
Explore cybersecurity insights and strategies with Marcus Ranum's keynote address, offering valuable perspectives on white hat hacking techniques and industry trends.
Bypassing Intrusion Detection Systems
Explore techniques for evading intrusion detection systems, enhancing network security knowledge and understanding potential vulnerabilities in cybersecurity defenses.
Attacking Networked Embedded Systems
Explore techniques for exploiting vulnerabilities in networked embedded systems, focusing on security weaknesses and potential attack vectors in interconnected devices.