Writing Badass Malware for OS X
Explore advanced OS X malware techniques, persistence methods, and security bypasses. Learn to create sophisticated threats and enhance Mac protection against current and future malware.
Harnessing Intelligence From Malware Repositories
Explore techniques for extracting intelligence from malware repositories using program analysis and data mining, with insights on connecting seemingly disparate cyber attacks and tracking malware trends.
Rocking the Pocket Book - Hacking Chemical Plant for Competition and Extortion
Explore techniques for exploiting chemical plant systems to cause economic damage while avoiding detection. Learn about attack stages, cost considerations, and creating misleading forensic evidence.
Is the NSA Still Listening to Your Phone Calls? - A Surveillance Debate
Debate on NSA surveillance practices, focusing on Section 215 of the Patriot Act and recent reforms. Explores impact on privacy, national security, and the effectiveness of congressional oversight.
How the Wassenaar Arrangement's Export Control of "Intrusion Software" Affects Industry
Experts discuss implications of Wassenaar Arrangement's export control on "intrusion software" for cybersecurity industry, research, and privacy, drawing parallels to 1990s crypto wars.
Remote Physical Damage 101 - Bread and Butter Attacks
Explore cyber-physical attacks on industrial systems, including generic "bread and butter" techniques and mitigation strategies beyond network security.
Graphic Content Ahead - Towards Automated Scalable Analysis of Graphical Images Embedded in Malware
Explores automated analysis of images in malware, focusing on identifying visually similar samples and classifying images into categories to enhance malware triage and reveal attacker patterns.
Optimized Fuzzing IOKit in iOS
Optimized fuzzing approach for iOS IOKit interfaces, dynamically resolving symbols and parameters to improve efficiency and effectiveness in vulnerability discovery.
Adventures in Femtoland - 350 Yuan for Invaluable Fun
Explore vulnerabilities in 3G/4G networks using femtocells. Learn to intercept data and exploit weaknesses in UMTS infrastructure, from unboxing to proof-of-concept demonstrations.
Abusing XSLT for Practical Attacks
Explore XSLT vulnerabilities and practical attacks on XML systems, including arithmetic manipulation, code logic failure, and compromising user confidentiality in web browsers.
When IoT Attacks - Hacking a Linux-Powered Rifle
Explore the security vulnerabilities of a Linux-powered precision rifle, including reverse engineering, attack surfaces, and implications of network-connected firearms.
Forging the USB Armory - An Open Source Secure Flash-Drive-Sized Computer
Explore the creation of a secure, open-source computer the size of a flash drive. Learn about innovative hardware design and advanced security features for portable computing.
Breaking Access Controls With BLEKey
Explore vulnerabilities in RFID access control systems and learn how to exploit them using open-source hardware. Discover techniques for circumventing security, logging access, and cloning cards.
Web Timing Attacks Made Practical
Explore practical web timing attacks, improving data collection and statistical analysis for more effective penetration testing. Learn adaptive techniques and open-source tools for identifying cryptographic vulnerabilities.
CrackLord - Maximizing Password Cracking Boxes
Explore distributed password cracking with CrackLord, a scalable system for load balancing GPU and CPU resources across multiple hardware systems, enhancing efficiency and accessibility.
Subverting Satellite Receivers for Botnet and Profit
Exploiting vulnerabilities in satellite receivers to build botnets, highlighting risks in DVB-CA encryption, custom plugins, and CCCAM protocol. Demonstrates potential for large-scale network compromise and unauthorized access.
Faux Disk Encryption - Realities of Secure Storage on Mobile Devices
Explore mobile device data security challenges, debunk full-disk encryption myths, and learn sophisticated secure storage techniques for iOS and Android, addressing real-world application vulnerabilities.
Compromising the Windows Enterprise Via Windows Update
Exploración de vulnerabilidades en Windows Update y WSUS, demostrando cómo comprometer sistemas empresariales mediante actualizaciones maliciosas y controladores de dispositivos USB.
Data-Driven Threat Intelligence - Metrics on Indicator Dissemination and Sharing
Análisis basado en datos de indicadores de inteligencia de amenazas y comunidades de intercambio, explorando eficiencia, calidad y superposición de fuentes durante más de un año.
Breaking HTTPS With BGP Hijacking
Explore BGP hijacking's impact on HTTPS security, revealing vulnerabilities in Internet routing and SSL/TLS PKI. Learn about potential exploits and prevention strategies.
How to Hack Government - Technologists as Policy Makers
Explore how technologists can influence policy-making, focusing on the FTC's role in protecting online privacy and data security through enforcement, research, and consumer protection initiatives.