The Active Directory Botnet
Explore how botnets and C&C servers can infiltrate organizations, bypass network controls, and render security measures ineffective, with a focus on Active Directory vulnerabilities.
All Your SMS & Contacts Belong to ADUPS & Others
Uncover Android firmware vulnerabilities exposing user data to third parties without consent. Learn about ADUPS and other threats to mobile privacy and security.
Cache Side Channel Attack - Exploitability and Countermeasures
Explore dangerous cache attacks, their characteristics, and real-world applications. Learn about exploitability, countermeasures, and key takeaways for protecting against these privacy-violating threats.
The Power of Data-Oriented Attacks - Bypassing Memory Mitigation Using Data-Only Exploitation Techniques
Explore data-oriented attacks that bypass memory mitigation techniques, focusing on exploiting vulnerabilities without altering control flow. Learn about innovative exploitation methods and their implications for cybersecurity.
Phishing for Funds - Understanding Business Email Compromise
Explore the surge in Business Email Compromise, its global impact, and strategies to protect organizations from this lucrative cybercrime targeting various market segments.
GPU Security Exposed
Explore GPU security vulnerabilities, including shared memory risks and privilege escalation issues, with insights on protecting popular devices from potential exploits.
Beyond the Blacklists - Detecting Malicious URL Through Machine Learning
Explore machine learning techniques for detecting malicious URLs beyond traditional blacklists, focusing on HTTP-based communications and behavioral modeling for improved malware detection.
Talking Behind Your Back - Attacks and Countermeasures of Ultrasonic Cross-Device Tracking
Explore ultrasonic cross-device tracking: its marketing potential, privacy implications, and vulnerabilities. Learn about attacks, countermeasures, and the future of this emerging technology.
Code Deobfuscation - Intertwining Dynamic, Static and Symbolic Approaches
Explore advanced code deobfuscation techniques combining dynamic, static, and symbolic approaches to enhance software analysis and reverse engineering capabilities.
Attacking Windows by Windows
Explore a novel method for exploiting Windows kernel vulnerabilities across multiple OS versions, bypassing security measures to gain system privileges.
Use-After-Use-After-Free - Exploit UAF by Generating Your Own
Explore a novel exploitation technique for UAF vulnerabilities in Adobe Flash, transforming them into multi-class type confusions for full memory access despite recent mitigations.
WiFi-Based IMSI Catcher
Explore new WiFi-based IMSI catcher techniques for tracking mobile devices, exploiting authentication protocols and discussing potential mitigations for operators and users.
The Path Less Traveled - Abusing Kubernetes Defaults
Explore Kubernetes vulnerabilities, attack paths, and mitigations in default configurations through live demonstrations, focusing on cluster takeovers and host escapes.
Command Injection in F5 iRules
Explore command injection vulnerabilities in F5 iRules, focusing on syntax, exploitation techniques, and security implications for BigIP F5 products used in high-performance web traffic routing.
GDPRrrrr - Using Privacy Laws to Steal Identities
Explores how GDPR's Right of Access can be exploited by social engineers to steal sensitive information, highlighting vulnerabilities in data protection laws and offering insights for businesses and legislators.
Denial of Service with a Fistful of Packets - Exploiting Algorithmic Complexity Vulnerabilities
Explore algorithmic complexity vulnerabilities in web servers, their impacts, and mitigation strategies. Learn how small inputs can cause significant disruptions and how to protect against these attacks.
CQTools - The New Ultimate Hacking Toolkit
Explore top 39 hacking tools in CQTools, including 5 new ones for privilege elevation and network attacks. Learn techniques for hash extraction, impersonation, and decryption.
Open Sesame - Picking Locks with Cortana
Uncover the "Open Sesame" vulnerability in Cortana, allowing attackers to bypass Windows lock screens, execute code, and potentially gain elevated privileges on locked machines.
Under the SEA - A Look at the Syrian Electronic Army's Mobile Tooling
Explore the Syrian Electronic Army's mobile surveillance tools, focusing on SilverHawk, its capabilities, and deployment methods in this cybersecurity analysis.
DeepPhish - Simulating Malicious AI
Explore AI-driven phishing simulations, encryption misuse, and advanced cybercrime techniques. Learn to detect and counter evolving digital threats in this cutting-edge security presentation.
Practical Web Cache Poisoning - Redefining 'Unexploitable'
Explore web cache poisoning techniques to compromise websites by exploiting caches and content delivery networks, turning them into exploit delivery systems targeting unsuspecting visitors.