Applying DevOps Principles for Better Malware Analysis
Leveraging DevOps principles to streamline malware analysis, automate lab setup, and enhance collaboration among security researchers for more efficient threat detection and response.
CANtact - An Open Tool for Automotive Exploitation
Explore CANtact, an open-source tool for automotive network analysis. Learn to view, decode, and manipulate CAN traffic for reverse engineering and security testing of vehicle systems.
How Anonymous Narrowly Evaded the Cyberterrorism Rhetorical Machine
Explore the factors that prevented Anonymous from being labeled as cyberterrorists, despite their global political activism and masked identity. Gain insights into the complex dynamics of digital activism and cybersecurity rhetoric.
Hide Yo' Kids - Hacking Your Family's Connected Things
Explore vulnerabilities in IoT devices for children, including baby monitors and GPS trackers. Learn research techniques like mobile reverse engineering and network analysis to enhance IoT security.
Stupid Pentester Tricks
Discover creative hacking techniques to overcome pentesting challenges. Learn RFID cloning, universal access cards, key theft methods, and advanced phishing strategies for unconventional target compromise.
The New Wave of Deserialization Bugs
Explore deserialization vulnerabilities in Java, PHP, and Python. Learn to identify and mitigate risks in enterprise applications using practical examples and tools.
DDoS - Barbarians at the Gate
Explore tools, methods, and data behind headline-making DDoS attacks, gaining insights into modern cybersecurity threats and defense strategies.
Why You Should - But Don't - Care About Mainframe Security
Explore mainframe security breaches, their surprising ease, and media silence. Uncover shocking methods used and understand why mainframe security deserves more attention.
Breaking PRNGs
Explore vulnerabilities in popular frameworks' random value generation, learning to identify and potentially exploit predictable implementations.
The Uroburos Case - Analysis of the Tools Used by This Actor
Explore the sophisticated Uroburos espionage software, including its rootkit, Agent.BTZ, ComRAT, and Cobra Carbon System. Gain insights into the group's infrastructure and operational methods.
EMET 5.2 - Armor or Curtain?
Explore advanced exploitation techniques to bypass EMET 5.2 mitigation strategies, enhancing your understanding of cybersecurity vulnerabilities and defense mechanisms.
Post-Quantum Cryptography - Today's Defense Against Tomorrow's Quantum Hackers
Explore post-quantum cryptography's role in defending against future quantum hackers, covering motivations, challenges, and practical implementations like Open Quantum Safe.
M33tfinder
Discover M33tfinder: a tool for identifying vulnerable web applications. Learn offensive security techniques from an experienced researcher in this informative conference talk.
Mainframe Hacking in 2019
Explore mainframe hacking techniques with expert Philip Young, covering security vulnerabilities, testing tools, and strategies to enhance mainframe protection in modern environments.
The SOC Counter ATT&CK
Explore SOC counter-attack strategies using the MITRE ATT&CK framework. Learn threat detection, modeling, and hunting techniques to enhance your organization's security posture.
Using Geopolitical Conflicts for Threat Hunting - How Global Awareness Can Enable New Surveillanceware Discoveries
Explore how global geopolitical awareness enhances threat hunting, enabling the discovery of new surveillanceware and nation-state malware in mobile security intelligence.
Wajam - From a Start-up to Massive Spread Adware
Explore the evolution of Wajam from startup to widespread adware, uncovering its tactics and impact on users' systems through malware researcher Hugo Porcher's analysis.
xRAT - Monitoring Chinese Interests Abroad With Mobile Surveillance-ware
Explore mobile surveillance-ware xRAT, used for monitoring Chinese interests abroad. Learn about threat detection, reverse engineering, and emerging mobile security challenges.
Tightening the Net in Iran
Explore Iran's internet landscape, including censorship, surveillance, and the impact of foreign tech companies. Learn about challenges faced by Iranians and efforts to improve accessibility and security.
Video Game Hacks, Cheats, and Glitches
Explore video game hacks and glitches, drawing parallels to modern security vulnerabilities. Learn how gaming exploits relate to real-world cybersecurity challenges.
Non-Crypto Constant-Time Coding
Explore cache attacks, SGX technology, and tools for writing constant-time code to protect confidential data from side-channel vulnerabilities in various computing contexts.