Timekiller: Escape From QEMU/KVM - Exploiting Asynchronous Clock Vulnerabilities
Demonstrating a novel guest-to-host escape exploit in QEMU/KVM using asynchronous clock vulnerabilities. Introduces "Timekiller" technique to turn heap overflow into arbitrary address write, achieving full VM escape.
Android: Protecting the Kernel - Kernel Security Strategies
Explore Android kernel security, attack vectors, and defense strategies. Learn about SELinux, DAC capabilities, and new protections implemented in AOSP/Android-N to safeguard against rooting exploits.
Meaningful Bounds Checking in the Linux Kernel - Addressing Buffer Overflows
Exploring buffer overflow vulnerabilities in the Linux kernel and innovative solutions for enhanced security through improved bounds checking and compiler optimizations.
DHCP Is Hard
Explore DHCP vulnerabilities and exploits in popular implementations, including dnsmasq, ISC DHCP, and systemd networkd, with insights on architecture and attack techniques.
WebKit Everywhere - Secure or Not?
Explore WebKit security, vulnerabilities, and exploitation techniques across platforms. Learn about security enhancements, mitigation strategies, and advanced exploit methods with real-world demos.
The Info Leak Era on Software Exploitation
Explore advanced techniques for exploiting software vulnerabilities through information leaks, focusing on defeating ASLR and converting various vulnerabilities into effective info leaks.
Ghosts and Gadgets - Common Buffer Overflows That Still Haunt Our Networks
Explore common buffer overflow vulnerabilities in network systems, their detection methods, and practical mitigation strategies for securing modern networks.
Exposing Critical Threats in Cellular Modem Security - Telit Vulnerabilities Analysis
Uncover critical security vulnerabilities in Telit cellular modems, including remote code execution flaws, SMS-based attacks, and MIDlet compromise methods that affect millions of connected devices.
Classic Vulnerabilities
Explore classic vulnerabilities in native exploitation, their recent resurgence, and modern tools for detection and prevention in this comprehensive security talk.
Black Hat USA 2025
Black Hat USA 2025
Black Hat Asia 2024
Black Hat Asia 2024
Black Hat Europe 2023
Black Hat Europe 2023
Black Hat USA 2023
Black Hat USA 2023
Black Hat Asia 2025
Black Hat Asia 2025
Black Hat Europe 2024
Black Hat Europe 2024
Black Hat Europe 2022
Black Hat Europe 2022