From Logic to Memory - Winning the Solitaire in Reparse Points
Explore advanced Windows file redirection vulnerabilities, bypassing mitigations with novel exploit techniques. Learn about reparse points, logic flaws, and memory corruption in system services.
A Universal Way to Exploit Android PendingIntents in High-profile and System Apps
Explore Android PendingIntent vulnerabilities in high-profile apps, learn exploitation techniques, and discover security implications through case studies and practical demonstrations.
New Ways of IPv6 Scanning
Explore innovative techniques for IPv6 scanning, uncovering vulnerabilities and effective methods to obtain IPv6 addresses despite the vast address space.
How Your E-book Might Be Reading You - Exploiting EPUB Reading Systems
Uncover security vulnerabilities in e-book reading apps through analysis of EPUB format, revealing potential privacy risks and exploitation techniques across various platforms and devices.
One Glitch to Rule Them All - Fault Injection Attacks Against the AMD Secure Processor
Explore fault injection attacks on AMD's Secure Processor, revealing vulnerabilities in CPU security and discussing implications for system integrity and trust.
Lost in the Loader - The Many Faces of the Windows PE File Format
Explore Windows PE file format intricacies, parser differentials, and a custom language for modeling loaders. Learn analysis techniques to aid reverse-engineering tasks.
Hand in Your Pocket Without You Noticing - Current State of Mobile Wallet Security
Uncover security flaws in popular mobile payment services, exploring potential fraud scenarios and vulnerabilities in contactless transactions for public transport and retail.
The Art of Exploiting UAF by Ret2bpf in Android Kernel
Explore Android kernel exploitation techniques, focusing on a Use-After-Free vulnerability in xt_qtaguid. Learn about KASLR bypass, rooting methods, and security measures against such attacks.
Achieving Linux Kernel Code Execution Through a Malicious USB Device
Explore Linux kernel exploitation via malicious USB devices, focusing on CVE-2016-2384 vulnerability. Learn about USB-based attacks, payload delivery, and mitigation strategies.
They Hacked Thousands of Cloud Accounts Then Sent Us Weird GIFs
Explore cloud security threats, including crypto-mining worms and innovative techniques targeting AWS, Kubernetes, and other providers. Learn about hackers' methods, persistence strategies, and potential impacts on cloud environments.
APTs Go Teleworking - The Rise of VPN Exploits
Explore the rise of VPN exploits amid increased remote work, focusing on Pulse Secure vulnerabilities, incident response challenges, and threat actor tactics in cyber espionage campaigns.
Practical HTTP Header Smuggling - Sneaking Past Reverse Proxies to Attack AWS and Beyond
Explore HTTP header smuggling techniques to bypass security measures, attack web applications, and exploit vulnerabilities in proxy servers and AWS services.
Certified Pre-Owned - Abusing Active Directory Certificate Services
Explore AD CS vulnerabilities for credential theft, persistence, and domain escalation. Learn offensive and defensive techniques to secure Active Directory PKI implementations.
Bypassing Windows Hello for Business and Pleasure
Explore vulnerabilities in Windows Hello's face recognition, demonstrating how attackers can bypass this passwordless authentication using a crafted USB device.
A New Class of DNS Vulnerabilities Affecting Many DNS-as-Service Platforms
Explore novel DNS vulnerabilities affecting major cloud providers, their impact on corporate networks, and potential information leakage. Learn about root causes, exploitation methods, and mitigation strategies.
Breaking Secure Bootloaders
Explore techniques to bypass secure bootloaders, including signature verification vulnerabilities, memory analysis, and firmware update exploits. Learn to identify and exploit weaknesses in modern device protection mechanisms.
Cloudy with a Chance of APT - Novel Microsoft 365 Attacks in the Wild
Explore novel APT techniques targeting Microsoft 365, including persistent access methods and data extraction. Learn technical details, potential extensions, and prepare for emerging threats.
A Broken Chain - Discovering OPC UA Attack Surface and Exploiting the Supply Chain
Explore OPC-UA protocol vulnerabilities and potential cyberattack vectors in industrial communication systems. Learn about attack surfaces, exploitation techniques, and security implications for Industry 4.0 environments.
Can You Roll Your Own SIEM
Explore building a custom cloud-native SIEM solution, discussing considerations, requirements, and benefits compared to vendor options. Learn about cost savings and improved capabilities.
5G IMSI Catchers Mirage
Investigates 5G security mechanisms against IMSI catchers, exploring vulnerabilities and protection techniques through practical experiments with commercial devices.
Electromagnetic Fault Injection & Automotive Systems
Explore electromagnetic fault injection to bypass security in automotive ECUs, demonstrating potential vulnerabilities in modern vehicle systems through practical examples and live demonstrations.