AWS GuardDuty - Post-DNS Era Covert Channel For C&C
Exploring advanced covert communication techniques for malware, including DNS tunneling, cloud services exploitation, and AWS GuardDuty evasion. Discusses mitigation strategies and common security pitfalls.
How I Found 16 Microsoft Office Excel Vulnerabilities in 6 Months
Discover the process of finding 16 Microsoft Excel vulnerabilities through fuzzing, including corpus selection, mutation algorithms, and result management techniques.
Security Analysis and Practical Attacks of LPWAN
Análisis de seguridad y ataques prácticos a redes LPWAN, enfocándose en LoRaWAN y NB-IoT. Explora vulnerabilidades en la cadena de suministro y módulos, compartiendo hallazgos y recomendaciones para mejorar la seguridad.
Binary Fuzzing With Snapshot-Assisted-Driven Comparison Branch Analysis
Innovative binary fuzzing technique using snapshot-assisted comparison branch analysis to efficiently find vulnerabilities in complex software, overcoming limitations of traditional symbolic execution methods.
Attacking Cloud Native Kubernetes With CDK
Exploración detallada de técnicas avanzadas para comprometer clústeres de Kubernetes en la nube, incluyendo escape de contenedores y ataques de red. Demostración práctica usando la herramienta CDK.
Exploitation With Shell Reverse & Infection With PowerShell
Exploración de técnicas de shell reverso y infección con PowerShell, demostrando ataques dirigidos y analizando la eficacia de soluciones de seguridad de endpoints.
The History of Adversarial AI
Comprehensive overview of AI security evolution, exploring vulnerabilities in modern AI systems and offering insights from extensive research to raise awareness about potential threats and protective measures.
Model Robustness Will Hurt Data Privacy?
Exploring the trade-off between AI model robustness and data privacy, revealing how adversarial training may increase vulnerability to privacy attacks and data reconstruction from gradient information.
Shaping the Future of the 0Day Market
Shaping the future of the 0-day vulnerability market through improved standards, platforms, and practices to enhance cybersecurity capabilities for law enforcement and intelligence agencies.
A Journey Into Synology NAS
Exploring Synology NAS security: environment setup, device fingerprinting, local services analysis, remote access flow, and vulnerability discoveries from local and remote perspectives.
When Qiling Framework Meets Symbolic Execution
Exploring Qiling Framework's new symbolic execution capabilities for advanced binary analysis across architectures, with demonstrations and insights into its development and applications.
WoW Hell - Rebuilding Heaven's Gate
Explore WoW64 architecture, its translation mechanisms, and potential vulnerabilities. Learn about reverse engineering techniques and bypassing security measures in Windows systems.
Attacking Fast Charging Electric Vehicles
Análisis de seguridad en protocolos de carga rápida para vehículos eléctricos, incluyendo vulnerabilidades y ataques potenciales usando la herramienta "XCharger" para pruebas y explotación.
Surveillance Is Not The Answer; What Is The Question?
Explores internet-era challenges like misinformation and surveillance, critiquing increased monitoring as a solution. Proposes alternative approaches for hackers and security experts to address these complex issues.
Payload Delivery for Initial Access in Red Team Engagement
Explore advanced payload delivery techniques for initial access in red team engagements, focusing on overcoming limited attack surfaces and bypassing security measures.
Attacking Storage Services - The Lynchpin of Cloud Services
Explore cloud storage vulnerabilities and attack techniques, focusing on enumeration, identification, exploitation, and post-exploitation strategies for various cloud services.
Optimizing the Protection of IoT Devices
Optimizing IoT device protection through innovative blacklist creation and evaluation. Proposes the Attacker IP Prioritizer algorithm and a standardized methodology for assessing blacklist effectiveness in resource-constrained environments.
Enterprise Security Strategy Leveraging on Zero Trust Approach
Explore Zero Trust security strategies for enterprise protection, moving beyond traditional perimeter defenses to role-based, defense-in-depth approaches for safeguarding virtual assets in the modern digital landscape.
The Journey for Manufacturers to Develop Cyber Resilient IoT Devices
Exploring Panasonic's innovative IoT threat intelligence system, combining physical and software honeypots to detect attacks, collect malware, and enhance cybersecurity for IoT devices.
Detection and Efficiency Testing of Endpoint Security Sensors
Evaluación comparativa de soluciones de seguridad de endpoints, simulando ataques dirigidos para medir la eficacia en detección de amenazas mediante firmas, NGAV y aprendizaje automático.
Hacking the 0day Marketplace
Exploring the 0day vulnerability market's challenges and proposing solutions to improve efficiency, safety, and professionalism for all stakeholders in cybersecurity.