GPG Memory Forensics
Techniques for retrieving passphrases and encryption keys from memory dumps of GPG processes, including Volatility3 plugins for key material extraction and potential defensive applications against ransomware.
How to Bypass AM-PPL & Disable EDRs - A Red Teamer's Story
Explore techniques to bypass Microsoft's AM-PPL technology and disable EDR products, presented by experienced red team leaders. Learn about vulnerabilities in Windows security measures and their potential exploitation.
A Broken Commercial Metaverse-Based Virtual Office Platform
Exposé des vulnérabilités critiques dans les plateformes de bureau virtuel du métavers, avec démonstrations d'attaques et recommandations de sécurité pour les développeurs et utilisateurs.
Bug Bounty - Great! Now What?
Panel discussion on bug bounty programs: processes, rewards, transparency, and improving relationships between organizations and security researchers.
Finding and Exploiting Bugs in TLS Libraries Used by Smart UPS Devices
Explore zero-click vulnerabilities in smart UPS devices, uncovering potential remote takeover risks and physical threats. Includes demonstration of exploits and discussion on cybersecurity implications.
Careful Who You Trust - Compromising P2P Cameras At Scale
Explore vulnerabilities in P2P protocols used by smart cameras, including Kalay Platform analysis, device-specific exploits, and remote code execution demonstrations. Learn about IoT security risks and mitigation strategies.
Fuzzware - Automating & Scaling Fuzzing For Firmware
Automated firmware testing using Fuzzware: emulate and fuzz embedded systems without hardware. Discover vulnerabilities in network stacks and scale security analysis for diverse devices.
GNU Anastasis - Privacy-Preserving Key Backup And Recovery
Explore GNU Anastasis, a privacy-focused key backup and recovery system. Learn about its cryptographic design, system architecture, and integration possibilities for enhanced digital security and self-custody solutions.
High-Assurance Code Reviews - How Consulting Works When the Risks Are High
Insights into high-stakes code reviews for critical software. Learn techniques for rapid, effective security assessments of cryptographic libraries, cloud-native software, and smart contracts from Trail of Bits' CEO.
Ransomware Considered Hazardous To Your Health
Explore evolving ransomware threats and tactics, analyzing data from thousands of incidents to provide deep insights and contrarian perspectives on this critical cybersecurity issue.
CVE-2018-9206 Workshop
Hands-on workshop exploring CVE-2018-9206 file upload vulnerability in Docker. Learn about causes, patches, and bypasses for this security flaw through practical exploitation exercises.
Hunting Android Malware with Importance Of Yara
Explore Android malware hunting using YARA framework. Learn techniques to identify and track malicious apps, even without direct access, and discover methods for detecting similar variants in the wild.
Red, Purple, and Blue Team Activity Using Azure
Hands-on workshop exploring Red, Blue, and Purple team activities using Azure components. Learn container deployment, routing, attack simulation, detection, and prevention techniques in a practical cybersecurity setting.
Technical Breakdown of Magecart - The Digital Bank Robbery
Detailed analysis of Magecart attacks on e-commerce sites, exploring how attackers steal credit card data through client-side JavaScript and strategies to protect against these threats.
Dangling Packages Leading to RCE
Explore dependency confusion attacks and how unclaimed packages in project files can lead to remote code execution. Learn about real-world vulnerabilities and mitigation strategies.
Defending Enterprise Cloud Infrastructure - A Hacker's Perspective
Explore cloud infrastructure security from a hacker's perspective. Learn overlooked attack vectors, defense mechanisms, and critical baseline practices to protect enterprise cloud environments at scale.
The State of Malware from the Eye of the Tiger
Comprehensive overview of global malware trends in 2019, focusing on India and the subcontinent. Explores attack methods, vulnerabilities, and successful malware strategies from basic to advanced threats.
Shack On The Beach
Adam Laurie explores reverse engineering of secure embedded systems in electronic communications, sharing insights from his extensive experience as a security consultant and DEFCON senior staff member.
Andromeda - GUI Based Dynamic Instrumentation Toolkit Powered by Frida
Explore Andromeda, a GUI-based toolkit for dynamic app analysis. Learn about class enumeration, method hooking, and runtime memory analysis features that enhance mobile security research and penetration testing.
A Hacker Walks Into A Co-Working Space
Explore security vulnerabilities in co-working spaces, including unpatched devices, entry systems, and surveillance cameras. Learn about potential risks and the importance of prioritizing cybersecurity in shared workspaces.
Getting to $10,000 - The Variables at Play in Determining Bounty Awards
Explore factors influencing high-value bug bounty awards with Microsoft's Bug Bounty Program manager, including key strategies for maximizing payouts in cybersecurity research.