NTLM Relay Is Dead, Long Live NTLM Relay
Explore NTLM relay attacks, their evolution, and modern exploitation techniques. Learn about vulnerabilities in Windows protocols and browsers, with insights on defense strategies.
Glitch Chronicles - Turning WebGL Into A Hammer
Explore WebGL vulnerabilities and GPU-based Rowhammer attacks in this technical deep dive on exploiting graphics hardware for security breaches.
Attacking Industrial Wireless Mesh Networks
Exploración detallada de vulnerabilidades en redes inalámbricas industriales, enfocándose en WirelessHART e ISA100.11a. Incluye demostraciones prácticas de ataques y herramientas de sniffing.
Extracting Messages From iCloud - Vladimir Katalov
Explore techniques for extracting messages from iCloud, covering iCloud security basics, data protection, and accessing stored messages. Learn about encryption, token policies, and iCloud sync settings.
IPv666 - Address of the Beast
Explore IPv6 security implications, addressing schemes, and potential vulnerabilities. Learn about honeypot servers, machine learning applications, and techniques for identifying aliased networks in IPv6 environments.
Adversarial Attacks on Autonomous Cars - The Missed Gap
Explore adversarial attacks on autonomous vehicles, examining the gap between academia and industry, and discussing potential vulnerabilities in AI-driven transportation systems.
The Road to iOS Sandbox Escape
Exploring iOS sandbox vulnerabilities through mach message IPC, revealing potential exploits in various daemons. Includes research tools and demonstrations of discovered vulnerabilities in Apple's mobile devices.
Exploiting Automation in LTE Mobile Networks
Exploración de vulnerabilidades en la automatización de redes LTE, demostrando métodos de ataque y discutiendo contramedidas para operadores y usuarios finales.
File Structures - Another Binary Exploitation Technique
Exploring FILE structure exploitation in Glibc to bypass modern OS protections, demonstrating remote code execution techniques and File Stream Oriented Programming.
Blockchain and Smart Contract Attack Vectors
Explore blockchain vulnerabilities, smart contract issues, and topology attacks. Learn best practices for mitigating risks in decentralized systems and Ethereum-based platforms.
Cognitive Automation With Machine Learning In Cybersecurity
Explore cognitive automation and machine learning in cybersecurity, covering risk analytics, threat detection, and incident management. Learn how ML enhances fraud detection and security operations.
Monitoring Native Execution in WoW64 Apps
Explore advanced techniques for monitoring and injecting 64-bit code into WoW64 processes, overcoming security challenges and OS limitations to enhance application security.
SayaKenaHack - Breach Notification in Malaysia
Exploring Malaysia's data breach crisis, breach notification challenges, and the underground data trading community. Insights on improving breach notification laws and protecting citizen data.
Generic and Static Detection of Mobile Malware Using ML
Explore machine learning techniques for generic, static detection of mobile malware, focusing on Android but applicable to iOS. Learn about the research methodology, workflow, and results.
Demystifying the Definitions of Dark
Demystifying deep web, dark web, and related terms. Clarifies misconceptions, explores definitions, and offers a new perspective on internet classification.
KLara - Your New Friend
Cloud-based Yara scanner for efficient malware detection. Scans large malware libraries at high speeds, enhancing threat intelligence and APT hunting capabilities. Open-source project with live demo.
Exposing Hidden Exploitable Behaviors Using EDF
Exposing hidden exploitable behaviors in programming languages using differential fuzzing. Techniques for identifying undocumented functions, OS command execution vulnerabilities, and other security issues.
Over the Edge - Pwning the Windows Kernel
Exploración detallada del subsistema gr áfico de Windows, vulnerabilidades del kernel y técnicas de escape del sandbox de Edge, con demostraciones de exploits para elevar privilegios desde el proceso de contenido de Edge a SYSTEM.
Mallet - Towards a Generic Intercepting Proxy
Explore Mallet, a new open-source intercepting proxy with a user-friendly interface, high performance, and extensive protocol support. Learn its advantages over existing tools and potential applications.
Applying Machine Learning to User Behavior Anomaly Analysis
Explore advanced machine learning techniques for user behavior anomaly detection in cybersecurity, covering feature selection, data quality, behavioral whitelisting, and neural network predictions.
Hacking a Hospital for Fun and Profit
Revealing security vulnerabilities in hospital networks through penetration testing, exposing risks in medical devices, software, and systems for improved healthcare cybersecurity.