Exploiting Zoom on MacOS
Exploración detallada de una vulnerabilidad de ejecución remota de código en el cliente Zoom para macOS, incluyendo técnicas de ingeniería inversa y explotación aplicables a otras aplicaciones.
Securing Cyber-Physical Systems - Moving Beyond Fear
Exploring cybersecurity challenges in physical systems, this talk examines root causes of vulnerabilities and proposes systemic approaches to embed security in design, moving beyond fear-based tactics.
4G LTE Man in the Middle Attacks With a Hacked Femtocell
Explore 4G LTE vulnerabilities through femtocell hacking, including rooting techniques, portability modifications, and man-in-the-middle attacks. Learn to exploit small cell access networks for security research.
Bypassing Hardware-Based Trusted Boot Through x86 Downgrade
Exploiting microcode loader vulnerability to downgrade CPU microcode, enabling attacks on Intel security technologies like Boot Guard and TXT by loading older, vulnerable versions of Authenticated Code Modules.
The CISO's Dilemma
Exploring CISO challenges: threat landscape, expertise shortage, product obsolescence, and compliance burdens. Insights from effective CISOs on navigating these complexities in enterprise defense.
Physical to Cyber and Back - Fingerprint Scanner Security
Exploring vulnerabilities in fingerprint scanners and access control systems, demonstrating physical-to-virtual attacks, and discussing network persistency techniques in IoT devices.
DFEx - DNS File Exfiltration
Explore DNS file exfiltration techniques, including a unique protocol for bypassing NG Firewalls. Learn about HIPS tricks and innovative approaches to data transfer across networks.
Security Should Be Smarter Not Harder
Explore cybersecurity strategies, bug bounty programs, and hacker motivation with Katie Moussouris. Learn about industry myths, perverse incentives, and practical solutions for smarter security practices.
Hacking Jenkins
Exploring Jenkins vulnerabilities, including dynamic routing misuse and Groovy sandbox escape. Learn to build custom gadgets and exploit Jenkins through unconventional methods.
Binder - The Bridge To Root - Hongli Han and Mingjian Zhou
Exploración detallada de la vulnerabilidad "Waterdrop" en el controlador Binder de Android, que permite escalar privilegios y obtener acceso root en dispositivos populares, incluyendo los Pixel más recientes.
Sneaking Past Device Guard
Exploración de técnicas avanzadas para eludir Device Guard en Windows 10, incluyendo métodos que requieren privilegios de administrador y otros que utilizan aplicaciones nativas del sistema operativo.
A Successful Mess Between Hardening and Mitigation
In-depth analysis of Content Security Policy for XSS prevention, exploring its effectiveness, debunking myths, and sharing real-world data on successful XSS mitigation in sensitive applications.
Researching New Attack Interfaces on iOS and OSX
Exploración de nuevas interfaces de ataque en iOS y OSX, revelando vulnerabilidades del kernel y controladores mediante ingeniería inversa, análisis estático/dinámico y fuzzing mejorado.
Overcoming Fear - Reversing With Radare2
Comprehensive guide to reversing with Radare2, covering installation, basic commands, visual modes, configuration, and practical applications. Suitable for beginners and professionals in computer security.
Duplicating Black Box Machine Learning Models
Exploración de técnicas avanzadas para duplicar modelos de aprendizaje automático de caja negra, destacando vulnerabilidades en servicios en la nube y proponiendo un nuevo método de ataque más eficiente.
Finding Vulnerabilities in iOS - MacOS Networking Code
Explore iOS/macOS networking vulnerabilities, focusing on mbuf processing in XNU kernel. Learn about network packet structures, vulnerability discovery techniques, and PoC exploit development.
TOCTOU Attacks Against Secure Boot and BootGuard
Explore TOCTOU attacks on Intel's BootGuard, learn about vulnerabilities in secure boot processes, and discover open-source tools for testing system security.
Hey Attacker! I Can See You!
Exploring cloud-scale deception technology to track and analyze attackers, enhancing Azure security through psychological and technical approaches for better threat intelligence and user protection.
WiCy - Monitoring 802.11AC Networks At Scale
Explore challenges in 802.11ac network monitoring and learn to create a custom monitoring platform using repurposed access point hardware. Gain practical knowledge and scripts for implementation.
Rise of the WarPi
Explore WarRoaming techniques, custom gear, and strategies for efficient WiFi discovery. Learn from a top-ranked WiGLE.net contributor's journey and insights into wireless surveying and intelligence gathering.
Hacking LTE Public Warning Systems
Exploring vulnerabilities in LTE Public Warning Systems, demonstrating how fake emergency alerts can be created using low-cost hardware, potentially causing panic or system paralysis.