Silent Wire Hacking
Explore silent wire hacking techniques for undetected network intrusion through exposed RJ45 cables, bypassing link state detection and port blocking during red team attacks.
Building Systems on Shaky Grounds - 10 Tactics to Manage the Modern Supply Chain
Explore 10 tactics for managing modern software supply chains, balancing open-source benefits with security risks. Learn to assess vendors, conduct red team exercises, and implement effective incident response strategies.
Drones - The New Weapon of Choice - Also for Hackers
Explore drone-based threats, comprehensive assessment methodologies, and countermeasures. Learn about payload planting, communication tampering, insider threats, hacking risks, and privacy concerns in the evolving landscape of drone technology.
Popping a Shell on a Mainframe - Is That Even Possible
Explore mainframe security vulnerabilities and learn techniques for pentesting, deploying shells, and elevating privileges on MVS systems, starting from zero authentication.
25 Techniques to Gather Threat Intel & Track Actors
Discover 25 techniques for gathering threat intelligence and tracking actors, illustrated with 30 real-world cases. Learn about crimeware vulnerabilities, C&C misconfigurations, and underground marketplaces.
Hackers - Do We Shoot or Do We Hug?
Exploring the evolving perception of hackers, from threats to potential allies. Discusses bug bounty programs, responsible disclosure, and how companies can leverage hacker expertise for improved security.
Social Engineering - Setting People into Debug Mode
Explore social engineering tactics and their impact on corporate security, drawing insights from real-world hacks and competition experiences to understand vulnerabilities beyond technological solutions.
Are You Watching TV Now? Is It Real?
Análisis de vulnerabilidades en smart TVs con WebOS: estructura, vectores de ataque y escenarios de hacking demostrados en LG WebOS TV.
How to Measure Your Security
Discover techniques to measure and compare the effectiveness of security tools, holding vendors accountable. Learn to evaluate IDS, IPS, A/V, and other detection systems for better cybersecurity decision-making.
The Forbidden Image - Security Impact of SVG on the WWW
Explore SVG's security implications, potential vulnerabilities, and protective measures. Learn about malicious SVG examples and a new filtering tool for safer SVG usage on the web.
A Close Look at Rogue Antivirus Programs
Comprehensive analysis of rogue security software, examining characteristics, behavioral patterns, and potential benefits. Explores methods to differentiate from legitimate antivirus programs and investigates the financial aspects behind these products.
Skirack ROP for Masses
Practical introduction to ROP exploitation technique, demonstrating bypass of DEP and ASLR. Includes tool showcase for efficient ROP payload generation.
Project Quebec and Win32 Exploit Development with Pvefindaddr
Explore pvefindaddr plugin for Immunity Debugger, automating Win32 exploit development tasks. Preview Project Quebec's optimizations and new features for enhanced performance.
Locking the Throne Room - ECMA Script 5, a Frozen DOM and the Eradication of XSS
Innovative approach to prevent XSS attacks using ECMA Script 5 features, sealing DOM properties and creating client-side IDS/IPS systems for modern browsers.
Cyberwar 4G - The Coming Smartphone Wars
Explores the challenges of cybersecurity in the era of smartphones, discussing potential threats, government responses, and the need for new defense strategies against mobile-based attacks.
Defensive Nature
Engaging panel discussion featuring cybersecurity experts exploring defensive strategies and the nature of digital threats in today's interconnected world.
Attacking XML Processing
Explore XML security vulnerabilities, from browsers to enterprise solutions. Learn about DTD, SVG, XSLT, XPath, and XML databases, with practical examples and PoC code.
Where Are We and Where Are We Going
Explore cybersecurity's past, present, and future with Mikko Hypponen. Delve into malware evolution, criminal tactics, governmental attacks, and emerging threats in this insightful keynote address.
Got Your Nose - How to Steal Your Precious Data Without Using Scripts
Discover sophisticated browser attacks that bypass traditional security measures, stealing sensitive data without using scripts. Learn about markup-based techniques that evade common protections.
HTML5 Something Wicked This Way Comes
Exploring HTML5's security vulnerabilities and advanced UI-Redressing techniques, demonstrating how attackers can exploit seemingly minor flaws in web applications for malicious purposes.
Weapons of Max Destruction
Análisis detallado de Stuxnet y Flame como armas cibernéticas avanzadas, su impacto en la seguridad estatal y las implicaciones para futuros conflictos cibernéticos.