Your Smartcard is Dumb: A Brief History of Hacking Access Control Systems
Explore the vulnerabilities of modern access control systems through live demonstrations, understanding fundamental design flaws and historical attacks on card-based security mechanisms.
Winning the Game of Active Directory - Securing Against Common Attack Strategies
Master essential Active Directory security strategies, from common attack vectors to implementing robust defensive measures for protecting enterprise environments and preventing network compromises.
Web2 Meets Web3: Hacking Decentralized Applications
Dive into the security challenges of decentralized applications, exploring real-world vulnerabilities, threat modeling, and attack vectors in both Web2 and blockchain environments.
Using AI Computer Vision in OSINT Data Analysis
Discover how to leverage AI computer vision tools in Azure and AWS to accelerate OSINT data analysis, perform object detection, facial recognition, and chronolocation analysis for forensic investigations.
Command Injection Vulnerabilities in CI/CD Pipelines - Securing Bazel GitHub Actions
Discover critical security vulnerabilities in CI/CD pipelines through a case study of Bazel GitHub Action, learning practical strategies to protect your projects from command injection attacks.
Human Dignity in AI and Tech Policy
Explore the critical intersection of human dignity, AI, and tech policy, examining how data-driven technologies impact individual rights and societal freedoms while discussing protective measures and solutions.
Breaking Boundaries: Popping Shells in Airgapped Systems with Arduino - BadUSB Exploitation
Discover how to bypass airgapped systems and execute wireless payloads using affordable Arduino hardware and basic coding techniques for penetration testing medical devices.
The Evolution of Cryptography - From Classical Methods to Modern Data Security
Explore the historical evolution of cryptographic terminology, from classical definitions to modern usage, while examining the crucial balance between data security and privacy protection.
Exploiting Bluetooth Vulnerabilities: From Vehicle Systems to Bank Account Access
Discover how to identify and exploit Bluetooth vulnerabilities in modern vehicle systems using BlueToolkit, exploring real-world security implications and practical attack vectors in automotive and aviation contexts.
Gender Inclusive Health Information System
Explore the development of inclusive healthcare information systems that accommodate diverse gender identities, focusing on data architecture and patient-centered design approaches.
Developing a Low-Cost Raspberry Pi Device for ADS-B Spoofing Detection
Discover how to build Fly Catcher, a Raspberry Pi-based device using neural networks to detect spoofed aircraft signals through ADS-B monitoring and analysis in real-time.
Fine-Grained Authorization with Relationship Based Access Control
Explore fine-grained authorization through relationship-based access control (ReBAC), offering practical solutions for complex permission scenarios beyond traditional role-based systems.
Secure Secrets Management - Leveraging Laravel with HashiCorp Vault
Master secure secrets management by integrating Laravel with HashiCorp Vault to protect sensitive data like API keys and passwords while building robust web applications with enhanced security features.
An Audacious Plan to Halt the Internet's Enshittification
Discover how to combat internet platform degradation through antitrust measures, privacy laws, and user empowerment tools, exploring solutions to preserve digital spaces from corporate exploitation.
Staying Undetected Using the Windows Container Isolation Framework
Delve into Windows Container isolation mechanisms, file system separation techniques, and security implications, including methods to manipulate container frameworks for enhanced system protection.
Azure B2C Zero-Day Exploit Chain - From Public Keys to Microsoft Bug Bounty
Uncover a complete exploit chain vulnerability in Azure B2C, from cryptographic misuse to full account compromise, including novel attack methods for crypto key recovery and its impact on Microsoft's bug bounty system.
RingHopper: From User-Land to SMM - A Journey Through UEFI Vulnerabilities
Delve into the discovery of RingHopper, a critical UEFI vulnerability affecting billions of devices, exploring exploitation techniques and elevation methods across Windows and Linux systems.
The GitHub Actions Worm - Understanding CI/CD Platform Vulnerabilities
Dive into the security vulnerabilities of GitHub Actions, exploring how malicious code can spread through Action dependencies and learning essential defense strategies against CI/CD platform attacks.
Fantastic Ethertypes and Where to Find Them - Understanding Ethernet Protocols and Their Applications
Delve into the mysterious world of ethernet protocols, exploring obscure ethertypes across industrial, medical, and transportation networks, with practical demonstrations and security implications.
Road to Compliant On-Chain Privacy with zkBob
Explore the innovative zkBob protocol and its approach to achieving regulatory-compliant privacy solutions for blockchain transactions while maintaining decentralization and security standards.
Introduction to Unirep - ZK Data System
Dive into the fundamentals of Unirep, a zero-knowledge data system, exploring its architecture, applications, and role in enhancing privacy and scalability on Ethereum.