When the Tables Turn
Explore cybersecurity tactics and strategies as experts discuss defensive techniques, threat analysis, and emerging trends in information security at this Black Hat conference session.
The 3 Way10 Bugspray - The 802154 Attack Surface
Explore the 802.15.4 attack surface and learn about potential vulnerabilities in wireless sensor networks, IoT devices, and smart home systems.
Recreating an iOS 0-Day Jailbreak Out of Apple's Security Updates
Detailed walkthrough of recreating an iOS jailbreak from security updates, covering vulnerability discovery, exploit development, and jailbreak creation. Includes practical demonstration and insights.
Hardware-Enforcement of Walther-Recursive Program Functions
Explore hardware-enforced restrictions on computational complexity using JIT compilation and Intel's Processor Tracing to improve security through limited return-oriented programming.
Your Exploit is Mine - Automatic Shellcode Transplant for Remote Exploits
Innovative technique for automatic shellcode transplantation in remote exploits, enabling efficient reuse and adaptation of existing exploits with new shellcode through symbolic tracing and layout remediation.
Analysis of the Attack Surface of Windows 10 Virtualization-Based Security
Explore Windows 10's virtualization-based security, its implementation details, and potential vulnerabilities. Includes demonstrations of exploits against VBS and firmware, with a focus on platform complexity issues.
Advanced DMA Reentrancy Techniques to Escape QEMU
Explore advanced DMA reentrancy techniques for QEMU escape, including DMA Reflection/Refraction and DMA Oriented Programming. Learn about vulnerabilities, exploit processes, and future challenges in virtualization security.
Hunting Windows Desktop Window Manager Bugs
Exploring Windows Desktop Window Manager vulnerabilities, focusing on DirectComposition UserSpace. Covers architecture, attack surfaces, and specific CVEs, offering insights into bug hunting techniques and security implications.
SOHO Hacking at Pwn2Own
Exploring vulnerabilities in home routers and small business devices, detailing methodologies for finding and exploiting security flaws, and demonstrating real-world attack scenarios in SOHO networks.
Syscalls in Shellcode - Techniques for Malicious Functionality
Explore advanced techniques for using Windows syscalls in shellcode, overcoming portability issues, and enhancing malicious functionality. Learn about ShellWasp tool and novel WoW64 syscall invocation methods for stealthy code execution.
Automation of Penetration Testing and the Future
Explore the future of automated penetration testing, its impact on the industry, and strategies for adapting to evolving cybersecurity challenges.
Easy Ways to Bypass Anti Virus Systems
Discover simple techniques to evade antivirus systems, including signature detection, emulation, sandboxing, and firewalls. Learn how attackers can bypass popular security measures with minimal effort and resources.
Bypassing DEP With Jump-Oriented Programming
Explore Jump-Oriented Programming (JOP) for code-reuse attacks, including its fundamentals, the JOP ROCKET tool, and techniques to bypass DEP and ASLR in Windows environments.
Fuzzing - Finding Your Own Bugs and 0days
Aprenda a criar e usar um fuzzer para encontrar bugs e vulnerabilidades, incluindo técnicas para escrever exploits e obter acesso a sistemas. Demonstrações práticas incluídas.
Jailbreaks Never Die - Exploiting iOS 13.7
Unveiling iOS 13.7 exploit chain: kernel vulnerabilities, mitigation bypasses, and techniques for reading/writing kernel memory. Insights into iOS security research and jailbreak development.
Software Security Era - Past, Present, and Future
Explore the evolution of memory corruption exploitation, from early techniques to modern mitigations. Includes live demos of vulnerabilities and discusses the ongoing challenges in software security.
Automatic Generation of ROP Chains
Introduces EasyROP, a tool for automating ROP attacks by finding gadgets in binary files. Analyzes Windows libraries for attack feasibility and demonstrates a real-world application on CVE-2010-3333.
For The Win - The Art of the Windows Kernel Fuzzing
Explore advanced Windows kernel fuzzing techniques, including a new method and custom tool for discovering vulnerabilities in kernel objects and their relationships.
Might As Well JUMP - Exploit Development For Java Serialization
Explore Java serialization exploit development, including 0day custom exploits, reverse engineering, and ROP techniques. Learn to break HMAC/MAC and create Python exploits for educational purposes.
Advanced SOHO Router Exploitation
Explore advanced techniques for exploiting SOHO routers, including firmware analysis, vulnerability discovery, and ARM/MIPS exploit development. Learn about 0-day vulnerabilities and post-exploitation concepts for household routers.
One-Click to Completely Takeover a MacOS Device
Explore vulnerabilities in MacOS security features and learn how to bypass them for a one-click takeover of both Apple Silicon and Intel Mac devices. Includes live demo and expert insights.