Information Flows and Leaks in Social Media
Explore social media's impact on information flow, opinion formation, and real-world events. Analyze case studies of online campaigns and their consequences across different regions and contexts.
What Is the Max Reflected Distributed Denial of Service - rDDoS - Potential of IPv4
Explore the maximum potential of IPv4 for Reflected Distributed Denial of Service attacks, including calculation methods, data visualization, and implications for DDoS mitigation strategies.
API Design for Cryptography
Explore cryptographic API design, focusing on NaCl and libsodium. Learn about challenges, best practices, and future trends in creating secure and user-friendly cryptographic libraries.
Sigma - Generic Signatures for Log Events
Explore generic signatures for log events with Sigma, a YAML-based format for sharing and converting log signatures across different SIEM systems and query languages.
Barncat - Using MISP for Bulk Surveillance of Malware
Explore MISP for large-scale malware surveillance, focusing on config extraction, analysis techniques, and practical applications in cybersecurity threat intelligence.
Keynterceptor - Press Any Key to Continue
Explore USB security vulnerabilities and the Keynterceptor, a stealthy keyboard implant for capturing and injecting keystrokes, with real-world demonstration and implications.
Let's Play with WinDBG & .NET
Explore automated .NET analysis using WinDBG, focusing on PowerShell scripts and .NET packer unpacking. Gain practical insights through live demonstrations and real-world case studies.
Queer Privacy & Building Consensual Systems
Exploring privacy challenges faced by marginalized communities through real stories, highlighting the need for inclusive, safer tools and systems that protect vulnerable individuals.
Snuffleupagus - Killing Bugclasses in PHP 7, Virtual-Patching the Rest
Explore Snuffleupagus, an open-source PHP security module that kills bug classes, implements virtual-patching, and enhances protection against vulnerabilities without modifying application code.
When Crypto Fails
Exploring real-world cryptographic failures in malware, this talk offers insights into identifying and potentially exploiting these vulnerabilities, with practical examples and a useful triage tool.
WiFi Exploitation - How Passive Interception Leads to Active Exploitation
Explore WiFi exploitation techniques, from passive interception to active attacks. Learn about device profiling, rogue access points, and MitM attacks. Includes demonstration of a new sensor framework for visualizing 802.11 data.
House Intercoms Attacks - When Frontdoors Become Backdoors
Explores vulnerabilities in modern building intercoms, demonstrating practical attacks and security risks associated with connected entry systems. Highlights potential backdoors and recommends security measures for M2M solutions.
Interesting Malware - No, I’m Not Kidding
Explore the intriguing CheshireCat malware family, its unique traits, and stealth tactics. Learn about its decade-long operation, retro coding style, and functional obfuscation techniques.
Where Should I Host My Malware?
Explore IoT vulnerabilities, focusing on FTP services in routers and NAS devices. Learn about ScanR framework, malware analysis, and protective measures against these widespread threats.
Bootstrapping an Architectural Research Platform
Explore x86 architecture research, covering CPU privileges, hypervisors, and emerging technologies. Learn to focus on research questions by understanding fundamental architectural concepts.
Credential Assessment - Mapping Privilege Escalation at Scale
Explore privilege escalation techniques in large-scale breaches and learn how to identify and combat credential exposure using a comprehensive framework for both offensive and defensive purposes.
Machine Duping - Pwning Deep Learning Systems
Explore vulnerabilities in deep learning systems and learn techniques to manipulate image recognition, speech recognition, and phishing detection through practical demonstrations and attack methodologies.
A Network of Sorrows - Small Adversaries and Small Allies
Exploring the impact of everyday security threats on ordinary people and advocating for user empowerment to build a safer internet through knowledge sharing and community support.
The Infosec Crossroads
Exploración de la evolución de ataques y defensas en ciberseguridad, abogando por un cambio hacia estrategias de defensa proactivas y basadas en inteligencia para superar las limitaciones de los enfoques reactivos actuales.
Exploit Generation and JavaScript Analysis Automation with WinDBG
Automate exploit generation and JavaScript analysis with WinDBG. Learn techniques for creating exploits from PoC crashes and tracking obfuscated JavaScript without triggering anti-debugging measures.
The Metabrik Platform - Rapid Development of Reusable Security Tools
Explore the Metabrik Platform for rapid security tool development. Learn to create reusable components, improve existing tools, and solve complex security challenges efficiently.