Robin Hood vs Cisco ASA AnyConnect
Detailed analysis of a critical vulnerability in Cisco ASA AnyConnect, covering fuzzing architecture, bug analysis, and exploitation techniques for IKEv1 packets.
Pwning Oracle EBS for Real Profit
Explore critical vulnerabilities in Oracle E-Business Suite, including Java deserialization and arbitrary file upload, and learn how attackers can exploit ERP systems for financial gain.
Arbitrary Code Mitigations and Remote Procedure Code Reuse Attacks
Explore advanced exploit techniques using Remote Procedure Call-based models to bypass Microsoft's arbitrary code execution mitigations, creating complex payloads with minimal code reuse.
The Unbearable Lightness of BMCs
Explora vulnerabilidades críticas en dispositivos de gestión remota de centros de datos, revelando riesgos de ejecución de código y movimiento lateral entre servidores y BMCs.
Out of the -v-Box
Análisis técnico de vulnerabilidades en VirtualBox para lograr un escape de máquina virtual, incluyendo ingeniería inversa, explotación y demostración práctica del exploit.
Smartphones Insecurity
Comprehensive analysis of smartphone vulnerabilities, exploring security flaws and potential exploits in mobile platforms. Insights from experienced security researchers on reverse engineering and exploit development.
Fuzzing - Finding Your Own Bugs and 0days
Aprende técnicas de fuzzing para descubrir vulnerabilidades y exploits de día cero. Incluye demostraciones prácticas de Buffer Overflow y creación de shellcode para pruebas de penetración.
SpeedPwning VMware Workstation
Discover the journey of reversing VMware Workstation vulnerabilities and developing a VM escape exploit in record time, offering insights into advanced security research techniques and time-pressured exploit development.
Exploit Development 101 - Sin Miedo al Overflow
Aprende desarrollo de exploits y técnicas de desbordamiento de búfer con Israel Aráoz Severiche. Domina habilidades esenciales de seguridad informática para identificar y explotar vulnerabilidades en sistemas.
Hacking the Pandemic's Most Popular Software - Zoom
Explore the vulnerabilities in Zoom discovered during Pwn2Own, including the process of finding and exploiting them to gain full control over a victim's system.
Kernel Pwning with eBPF - A Love Story
Explore eBPF technology, its impact on Linux kernel capabilities, and potential security vulnerabilities. Learn about verifier exploits and achieving code execution in the kernel.
Trace Me if You Can - Bypassing Linux Syscall Tracing
Novel vulnerabilities and exploitation techniques to bypass Linux syscall tracing, even with security measures like seccomp, SELinux, and AppArmor in place. Demonstrates how user-mode programs can evade detection.
What Happened to Your Home - IoT Hacking and Forensic with 0-Days
Explore IoT device vulnerabilities, hacking techniques, and forensic analysis in smart homes. Learn about zero-day exploits and their impact on home security.
PHP Internals Exploit Dev Edition
Explore PHP internals and exploit development techniques in this advanced security talk, focusing on vulnerabilities and defensive strategies for web applications.
Fetch Exploit - Attacks Against Source Code Downloaders
Explore attacks against source code downloaders and learn techniques to exploit vulnerabilities in fetch mechanisms, enhancing your cybersecurity knowledge.
How We Hacked Distributed CMSs
Explore techniques for hacking distributed content management systems, uncovering vulnerabilities and potential attack vectors in modern CMS architectures.
Project Quebec and Win32 Exploit Development with Pvefindaddr
Explore pvefindaddr plugin for Immunity Debugger, automating Win32 exploit development tasks. Preview Project Quebec's optimizations and new features for enhanced performance.
The Game - Life and How to Hack It
Aprende ingeniería inversa y desarrollo de trucos para videojuegos a través de la experiencia de un experto en seguridad, utilizando el MMORPG Rakion como ejemplo práctico.
Exploiting Samsung - Analysis of an In-The-Wild Samsung Exploit Chain
Análisis técnico detallado de una cadena de exploits 0-day de Samsung usada en la naturaleza, explicando vulnerabilidades, explotación, correcciones y demostraciones de forma accesible pero técnicamente avanzada.
Attack on Titan M, Reloaded - Vulnerability Research on a Modern Security Chip
Exploración de vulnerabilidades en el chip Titan M de Google, desde análisis estático hasta ejecución simbólica dinámica. Incluye demostración de explotación de CVE-2022-20233 para obtener ejecución de código.
Chop Suey - An Exceptional Dish With A Side Of Buffer Overflows
Explore buffer overflow vulnerabilities in exception handling, uncovering a new exploitation technique and its real-world implications for software security.