Write Once, Pwn Anywhere
Explore advanced Windows exploitation techniques, including DEP and ASLR bypass methods, for enhanced system penetration. Learn OS-independent strategies for more effective and versatile attacks.
Digging for IE11 Sandbox Escapes Part 1
Explore IE11 sandbox vulnerabilities, focusing on logic bugs and Enhanced Protected Mode. Learn techniques to investigate, analyze, and exploit sandbox weaknesses in Windows 8.1.
The Beast is in Your Memory
Explore advanced exploitation techniques and control-flow integrity mechanisms. Learn about Return-Oriented Programming, its countermeasures, and how to bypass emerging CFI solutions.
State of Web Exploit Toolkits
Deep dive into popular web exploit toolkits, analyzing construction, shellcodes, obfuscations, and exploits. Explore trends, data harvesting methods, and emerging players in cybercriminal landscape.
Beyond EIP
Explore advanced exploitation techniques beyond EIP, including OP sled, return addresses, and encoders. Learn about payloads and stagers for enhanced post-exploitation capabilities.
OptiROP - Hunting for ROP Gadgets in Style
Discover efficient ROP gadget hunting with OptiROP, a tool using semantic queries for quick, precise results across executable formats on x86/x64 architectures. Simplify shellcode development.
Malicious File for Exploiting Forensic Software
Exploiting vulnerabilities in forensic software file viewers through malicious files, demonstrating code execution and DoS attacks. Includes fuzzing techniques, vulnerability analysis, and countermeasures.
PinPadPwn
Explore vulnerabilities in payment terminals, including memory corruption issues and potential attack vectors. Learn about code execution risks and discuss profitable payloads for attackers.
PDF Attack - A Journey From the Exploit Kit to the Shellcode Part 1
Explore the intricacies of PDF-based attacks, from exploit kits to shellcode execution, in this comprehensive cybersecurity analysis by Jose Miguel Esparza.
PDF Attack - A Journey From the Exploit Kit to the Shellcode Part 2
Explore advanced PDF exploitation techniques, from exploit kits to shellcode execution, with expert insights on vulnerabilities and attack vectors.
Just-In-Time Code Reuse - The More Things Change, the More They Stay the Same
Explore advanced exploit techniques undermining fine-grained ASLR through just-in-time code reuse, demonstrating real-world applications and implications for cybersecurity defenses.
Are You My Type? Breaking .NET Sandboxes Through Serialization
Explore vulnerabilities in .NET serialization, including attacks on applications and sandbox breakouts. Learn about security issues, mitigation strategies, and the impact on .NET technologies.
Third Generation Exploits on NT - Win2k Platforms
Explore advanced exploitation techniques for NT/Win2k systems, focusing on third-generation vulnerabilities and cutting-edge attack methodologies.
Vivisection of an Exploit Development Process
Explore the intricate process of exploit development for Windows 2003, dissecting techniques and methodologies used by security professionals to identify and exploit vulnerabilities.
Falling Dominos Part III
Explore advanced hacking techniques and network vulnerabilities in this in-depth cybersecurity presentation, focusing on real-world attack scenarios and defense strategies.
Third Generation Exploitation
Explore advanced exploitation techniques and strategies in cybersecurity, focusing on third-generation methods and their implications for modern digital defense.
Microsoft Ninjitsu Tape 4
Explore advanced Microsoft security techniques and vulnerabilities in this in-depth Black Hat Briefings session, enhancing your cybersecurity expertise and defensive strategies.
Vivisection of an Exploit Development Process
Explore the intricate process of exploit development, dissecting techniques and methodologies used by security professionals to identify and exploit vulnerabilities in systems.
Apple's Predicament - NSPredicate Exploits on iOS and macOS
Explore NSPredicate vulnerabilities in iOS and macOS, including FORCEDENTRY sandbox escape and new research on circumventing Apple's restrictions for potential code execution in privileged processes.
The Hat Trick - Exploit Chrome Twice from Runtime to JIT
Explore Chrome vulnerabilities in V8's Maglev compiler, uncovering security risks in JS optimization and compilation processes for advanced browser exploitation techniques.
Return Oriented Programming, an Introduction
Learn the mechanics of Return Oriented Programming, an exploitation technique. Explore examples demonstrating code execution in contexts with non-executable stacks.