Hardware Protections Against ROP Attacks
Explore hardware-based defenses against Return-Oriented Programming (ROP) attacks with IBM expert Mike Rapoport, focusing on cutting-edge security measures for system protection.
Offensive Security 101
Learn essential offensive security techniques and strategies to protect systems from cyber threats and vulnerabilities.
The Path Towards Automated Heap Exploitation
Explore automated heap exploitation techniques and strategies for enhancing cybersecurity defenses in this insightful conference talk by Thaís Moreira Hamasaki.
Remotely Exploiting the ClamAV Antivirus Engine - CVE-2023-20032 Case Study
Explore a case study on exploiting CVE-2023-20032 in ClamAV, demonstrating remote code execution and ASLR bypass techniques applicable to similar antivirus software vulnerabilities.
Timekiller: Escape From QEMU/KVM - Exploiting Asynchronous Clock Vulnerabilities
Demonstrating a novel guest-to-host escape exploit in QEMU/KVM using asynchronous clock vulnerabilities. Introduces "Timekiller" technique to turn heap overflow into arbitrary address write, achieving full VM escape.
Escaping From VMware Workstation Through the Disk Controller
Exploración detallada de una vulnerabilidad en los controladores de disco de VMware Workstation que permite escapar de una máquina virtual, con demostraciones de exploits para Linux y Windows.
Exploiting the Lexmark PostScript Stack
Explore Lexmark PostScript stack exploitation, covering internals, language basics, mitigations, and achieving remote code execution through out-of-bounds read and type confusion vulnerabilities.
B(l)utter - Reversing Flutter Applications - HITB2023HKT COMMSEC Day 2
Innovative approach to reverse engineering Flutter apps using Dart runtime source code. Introduces B(l)utter tool for metadata extraction, code analysis, and Frida script generation.
Kioptrix Level 1 CTF Walkthrough - Boot-to-Root
Comprehensive walkthrough of Kioptrix Level 1 CTF, demonstrating boot-to-root techniques for penetration testing and vulnerability exploitation in a controlled environment.
Exploit Hall of Fame Interview - Project Zero's Natalie Silvanovich
Insightful interview with Project Zero's Natalie Silvanovich, exploring her expertise in exploit research and cybersecurity. Gain valuable insights into vulnerability discovery and cutting-edge security practices.
PWN2OWN Austin 2021 - Phones, Printers, NAS, and More
Explore cutting-edge cybersecurity challenges at PWN2OWN Austin 2021, featuring hacking competitions for phones, printers, NAS devices, and routers with over $500,000 in prizes.
PWN2OWN Austin 2021 - Phones, Printers, NAS, and More
Explore cutting-edge hacking techniques targeting phones, printers, NAS, and more at PWN2OWN Austin 2021. Witness live demonstrations of exploits on 22 devices with $500,000+ in prizes.
PWN2OWN Austin 2021 - Phones, Printers, NAS, and More
Live coverage of Pwn2Own Austin 2021, showcasing hacking attempts on phones, printers, NAS devices, and routers. Witness cybersecurity experts compete for over $500,000 in prizes.
Changing and Unchanged Things in Vulnerability Research
Explore vulnerability research evolution, from buffer overflows to advanced fuzzing and exploit mitigations. Analyze case studies and future trends in offensive and defensive security strategies.
New Phones, Software and Chips - New Bugs?
Explore cutting-edge vulnerabilities in modern smartphones, examining software and hardware innovations that introduce new security challenges.
How to Hack Shannon Baseband from a Phone
Explore techniques for hacking Shannon baseband from a phone, uncovering vulnerabilities and potential exploits in mobile communication systems.
ASN.1 and Done: A Journey of Exploiting ASN.1 Parsers in the Baseband
Explore ASN.1 parser vulnerabilities in cellular baseband, uncovering security risks and exploitation techniques in mobile communication systems.
The Print Spooler Bug that Wasn't in the Print Spooler
Explore a unique Windows vulnerability discovery, from initial bug report to full exploit chain, with insights on Microsoft's patch process and security implications.
Unveiling the Cracks in Virtualization - VMware Workstation Escape
Explore VMware Workstation vulnerabilities, focusing on USB controller exploits. Learn about information leakage, arbitrary read/write, and bypassing Windows protections in virtualization escapes.
URB Excalibur - New VMware All-Platform VM Escapes
Unveils groundbreaking research on VMware hypervisor vulnerabilities, focusing on virtual USB controllers. Demonstrates novel VM escape techniques using URB, showcasing a critical heap out-of-bounds write vulnerability across all VMware platforms.
Bug Bounty Hunting - Ethical Hacking for Software Security
Explore legal hacking, vulnerability disclosure, and ethical security practices. Learn to write effective reports and analyze published exploits.