Don't Kill My Cat
Evade antivirus and security layers with polyglot files and assembly obfuscation. Learn to create undetectable payloads for penetration testing using a versatile tool.
Hacking POS Systems
Explore PoS system vulnerabilities, from physical access to data extraction. Learn about kiosk breakouts, privilege escalation, and real-world examples of critical security flaws in hotel management platforms.
Data Science Tools and Techniques for the Blue Team
Explore data science tools and techniques for cybersecurity, including statistical analysis and machine learning, to enhance threat detection and defense capabilities in large-scale corporate environments.
How Surveillance Law was Expanded in Canada - What the Media has Reported - What’s Next
Explore Canada's expanded surveillance laws, media coverage, court cases, and future implications for cybercrime investigations and individual privacy rights.
Practical Uses of Program Analysis - Automatic Exploit Generation
Explore automatic exploit generation through program analysis techniques, including instrumentation and symbolic execution, with practical demonstrations and tool insights.
Inter VM Data Exfiltration - The Art of Cache Timing Covert Channel on x86 Multi-Core
Explore cache timing covert channels in x86 multi-core systems, learning techniques for inter-VM data exfiltration and reverse shell establishment using shared resources and architecture imperfections.
NorthSec 2015 - Jean Francois Cloutier & Francois Gagnon - CHEKS
Explore the science and technology behind the Chaotic Encryption Key System (CHEKS), including its concept, implementation, and practical application in a basic chat demo.
Threat Modeling for the Gaming Industry
Explore gaming industry security challenges, focusing on client-side logic, network protocols, account management, and untrusted platforms to enhance overall security and user experience.
OO RE with HexraysCodeXplorer
Explore object-oriented reverse engineering techniques for modern malware analysis, focusing on C++ code reconstruction and tools like HexRaysCodeXplorer for tackling complex malware frameworks.
Hopping on the CAN Bus
Learn to hack your car's CAN bus using an open-source toolkit. Explore CAN basics, attack methods, hardware/software tools, diagnostic protocols, and security implications for modern vehicles.
State of DNS Rebinding - Attack & Prevention Techniques and the Singularity of Origin
Explore DNS rebinding attacks, prevention techniques, and the concept of origin singularity. Learn about query analysis, protection bypasses, and practical defense strategies against this web security threat.
SSO Wars - The Token Menace
Explore SSO vulnerabilities, focusing on JWT and SAML tokens. Learn attack vectors, signature verification issues, and real-world implications for frameworks like WCF and SharePoint.
Examining DES-based Cipher Suite Support within the TLS Ecosystem
Explore DES-based cipher suite support in TLS, analyzing prevalence, geographical distribution, and implications for security. Learn why DES persists and how to remove it.
From Email Address to Phone Number - A New OSINT Approach
Explore innovative OSINT techniques to uncover phone numbers from email addresses, enhancing privacy and security investigations with cutting-edge methodologies and tools.
From EK to DEK - An Analysis of Modern Document Exploit Kits
Explore modern document exploit kits, their infection chains, and techniques. Gain insights into ThreadKit, VenomKit, and various exploitation methods used in malicious documents.
Serverless Infections - Malware Just Found a New Home
Explore serverless architecture vulnerabilities and learn how malware can exploit AWS Lambda functions, with insights on prevention and security best practices.
Turning - Page Tables - Bypassing Advanced Kernel Mitigations Using Page Tables Manipulations
Explore advanced kernel exploit techniques using page table manipulations to bypass Windows 10 mitigations. Learn virtualization-based security and memory management concepts.
Watch Out For That Bus! - Personal Disaster Recovery Planning
Practical strategies for personal disaster recovery planning, covering digital security, backups, financial preparedness, and ensuring loved ones can manage your affairs in emergencies.
The Current State of Adversarial Machine Learning
Explore adversarial machine learning's current landscape, including attack types, vulnerabilities, and defense strategies. Gain insights into visual understanding and notable research in this critical field.
Hackademia - The 2018 Literature Review
Explore cutting-edge cybersecurity research, from USB vulnerabilities to compiler techniques, with insights on emerging trends like citizen developers and domestic violence apps.
Bypassing Antivirus Engines Using Open Sourced Malleable C2 Software, MSFVenom, Powershell and a Bit of Guile
Learn techniques to bypass antivirus using open source tools like Malleable C2, MSFVenom, and PowerShell. Explore examples and scripts for more effective penetration testing and security assessments.