Vivisection of an Exploit Development Process
Explore the intricate process of exploit development, dissecting techniques and methodologies used by security professionals to identify and exploit vulnerabilities in systems.
Grabbing User Credentials via W2k ODBC Libraries
Explore techniques for exploiting Windows 2000 ODBC libraries to capture user credentials, presented by security expert Tim Mullen at Black Hat USA 2001.
Backdoor Lockpick
Reverse engineering and exploiting cryptographic backdoors in Phicomm routers, demonstrating vulnerabilities and developing tools for unauthenticated root access.
Bypassing Anti-Cheats and Hacking Competitive Games
Explore common game cheats, anti-cheat measures, and hacking techniques in competitive gaming. Learn how hackers outsmart security systems and the challenges faced by game developers.
The Future of Security
Explore the current state of cybersecurity, its challenges, and future directions. Learn how to shift towards more effective security practices and build technology with privacy by design.
Think Like a Hacker
Explore hacker mindsets and strategies to enhance system security. Learn practical steps for protecting data, improving authentication, and addressing vulnerabilities in your organization's digital infrastructure.
Cyber Security by an Ethical Hacker
Explore cybersecurity risks, ethical hacking, and the future of digital security with insights on the deep web, cyberattacks, and the role of security researchers.
Wheels of Wonder - Unveiling Car Hacking Poetry
Explore car hacking techniques and vulnerabilities in modern vehicles. Learn about potential security risks and protective measures in automotive cybersecurity from an expert presentation.
BingBang - Hacking Bing.com with Azure Active Directory
Discover a novel technique for identifying Azure Active Directory misconfigurations, exposing vulnerabilities in cloud-managed environments and their potential impact on major platforms like Bing.com.
Synthetic Trust - Exploiting Biases at Scale
Explore AI-generated voice phishing attacks, their psychological and technical aspects, and the growing threats of generative AI on decision-making, personal security, and organizational trust.
How NOT to Train Your Hack Bot - Dos and Don'ts of Building Offensive GPTs
Explore the potential and limitations of using large language models for offensive security operations, including techniques for finding vulnerabilities and ethical considerations.
All You Need is Guest
Uncover security risks of Azure AD guest accounts and learn how undocumented APIs can be exploited to gain unauthorized access to sensitive enterprise resources.
Apple's Predicament - NSPredicate Exploits on iOS and macOS
Explore NSPredicate vulnerabilities in iOS and macOS, including FORCEDENTRY sandbox escape and new research on circumventing Apple's restrictions for potential code execution in privileged processes.
Getting In - Initial Access - 2023 and Beyond
Explore cutting-edge techniques for gaining initial access in cybersecurity, focusing on creative social engineering methods that bypass modern corporate defenses and email filters.
Red Team Tales - 7 Years of Physical Penetration Testing
Insider tales from 7 years of physical penetration testing, revealing techniques for breaching high-security facilities and debunking myths about physical security across various industries.
Hack Like a Pro - Bug Bounties, Web Vulnerabilities & More
Explore ethical hacking, bug bounties, and cybersecurity with experts. Learn practical tips, essential skills, and valuable resources to enhance your hacking prowess and protect digital assets.
The Hat Trick - Exploit Chrome Twice from Runtime to JIT
Explore Chrome vulnerabilities in V8's Maglev compiler, uncovering security risks in JS optimization and compilation processes for advanced browser exploitation techniques.
Return Oriented Programming, an Introduction
Learn the mechanics of Return Oriented Programming, an exploitation technique. Explore examples demonstrating code execution in contexts with non-executable stacks.
MITM on PSTN - Novel Methods for Intercepting Phone Calls
Explore innovative techniques for intercepting phone calls on PSTN and mobile networks, covering Caller ID spoofing, SS7, call diverts, and social engineering to form a comprehensive attack method.
Hacking Mitsubishi PLC Without Access To Firmware
Discover techniques for analyzing and exploiting Mitsubishi PLC protocols without firmware access. Learn about protocol reconstruction, vulnerability discovery, and their impact on industrial systems.
Smashing the State Machine - The True Potential of Web Race Conditions
Explore advanced web race condition attacks, targeting state machines to forge data, misroute tokens, and hide backdoors. Learn efficient testing methods and precision tooling for exploiting vulnerabilities in high-profile websites.