Clusterfuzz
Explore Chrome's open-source Clusterfuzz system for real-time security bug detection, distributed fuzzing techniques, and insights into exploitable crash prevention across platforms.
Cold Boot Attack on DDR2 and DDR3 RAM
Explore cold boot attacks on DDR2 and DDR3 RAM, revealing vulnerabilities in data retention after power loss. Learn techniques, results, and mitigation strategies for this cybersecurity threat.
ICS SCADA Security Analysis of a Beckhoff CX5020 PLC
Análisis de seguridad de un PLC Beckhoff CX5020 utilizado en sistemas SCADA, revelando vulnerabilidades y demostrando formas de obtener control sobre el programa y el sistema operativo.
Mobile Self Defence
Explore mobile network vulnerabilities and learn self-defense strategies using SnoopSnitch, an Android app that detects common attacks like IMSI catchers and SIM exploits.
ECMA Script 6 from an Attacker's Perspective
Explore ECMA Script 6 from a security perspective, covering new language features, potential attack vectors, and strategies to mitigate risks in modern web browsers.
The Windows Sandbox Paradox
Explore Windows sandboxing challenges, security vulnerabilities, and OS limitations. Learn about unexpected behaviors, bugs in popular applications, and strategies for auditing sandbox implementations.
Phoneypdf - A Virtual PDF Analysis Framework
Explore tools and techniques for analyzing malicious PDF files, including phoneypdf framework. Learn to leverage Adobe PDF DOM and XFA for deeper insights into PDF exploitation and JavaScript execution.
Multi-Value WiFi - What the Heck Is It
Explore multi-value WiFi, its security implications, and latest developments in cloud Wi-Fi. Learn to leverage wireless technology as a business driver and protect against threats in enterprise environments.
Fuzzing the Easy Way Using Zulu
Explore fuzzing binary protocols with Zulu, a GUI-based tool for easy capture, mutation, and replay. Learn its features and successful bug-finding applications.
Advanced Smartphone Forensics
Explore advanced smartphone forensics techniques for iOS, Windows Phone, and BlackBerry, focusing on cloud backups, data encryption, and device tracking protocols.
Attacking WPA-WPA2 in the Cloud
Explore cloud-based techniques for cracking WPA/WPA2 Personal and Enterprise, leveraging massive compute power to perform large-scale dictionary attacks on wireless networks.
The Security Challenge
Keynote explores rising security challenges, sophisticated threats, and future risks in the digital economy, emphasizing the need for unified security to protect data and infrastructure.
Bug Bounty Programs - Crowd Sourcing Security
Explore Mozilla's bug bounty program, its history, benefits, and challenges. Learn how to implement similar programs and their advantages over black market alternatives.
Inception of Graphical Passwords
Explore innovative graphical password authentication, offering enhanced security and memorability compared to traditional alphanumeric methods. Learn implementation techniques and future possibilities.
SMS to Meterpreter - Fuzzing USB Modems
Explore innovative attacks on USB data modems, including fuzzing techniques and SMS payload execution. Learn about vulnerabilities, reverse engineering, and USB sniffing for offensive security research.
Introduction to Threat Modeling
Learn threat modeling basics, STRIDE model, and OWASP Threat Dragon in this interactive session. Gain practical skills to identify and mitigate security risks in software development.
Attacking the Data Before the Decision
Explore AI's impact on stock market manipulation, machine learning models, and data security in financial trading systems.
Process is No One Hunting for Token Manipulation
Learn hypothesis-driven hunting techniques for detecting access token manipulation in Windows authentication, with practical case studies and demonstrations.
How to Influence Security Technology in Kiwi Underpants
Explore innovative security techniques for kiwi underpants, covering jailbreaks, Microsoft vulnerabilities, credential protection, and cryptography in this engaging and unconventional talk.
Hacking Identity - A Pen Tester's Guide to IAM
Learn pen testing techniques for Identity and Access Management systems, covering intelligence gathering, attack vectors, and security challenges in IAM implementations.
Building a Cyber Training Range on a Budget
Aprenda a construir um ambiente de treinamento cibernético econômico, abordando hardware, sistemas operacionais, redes, ferramentas e técnicas para simular cenários realistas de segurança.