Fingerprints on Mobile Devices - Abusing and Leaking
Explore vulnerabilities in mobile fingerprint authentication, including authorization attacks, sensor spying, and backdoors. Learn to secure fingerprints and mitigate risks in this eye-opening analysis.
Universal Android Rooting Is Back
Explore universal Android rooting through kernel exploitation, focusing on a Use-After-Free bug affecting all Linux versions. Learn about innovative techniques for 64-bit devices and bypassing modern kernel mitigations.
The Memory Sinkhole - Unleashing An X86 Design Flaw Allowing Universal Privilege Escalation
Unveiling a critical x86 design flaw allowing privilege escalation, exploring forgotten backdoors, and demonstrating how to exploit vulnerabilities in processor architecture.
Commercial Mobile Spyware - Detecting The Undetectable
Uncover techniques to detect and protect against commercial mobile spyware, safeguarding personal privacy and corporate security in an era of increasing digital surveillance.
Attacking Hypervisors Using Firmware and Hardware
Explore vulnerabilities in hypervisors through firmware and hardware emulation, demonstrating attacks and their impacts. Learn about firmware rootkits and new testing modules for hypervisor security.
GameOver Zeus - Badguys and Backends
Detailed exploration of GameOver Zeus botnet, covering its operators, law enforcement investigation, and innovative legal strategies used to dismantle the cybercriminal network.
Winning the Online Banking War
Explore advanced techniques to combat banking malware, including evasion methods and a novel Zero Knowledge Protocol-based approach for securing client-server communications.
Android Security State of the Union
Explore key factors driving Android security using data from millions of devices, establishing a baseline and identifying areas for community focus and research.
Next Level Cheating and Leveling Up Mitigations
Explore advanced game cheating techniques and anti-cheat strategies, including practical attacks on popular anti-cheat engines and their implications for multiplayer gaming security.
Insecurity of Mobile Banking
Explore mobile banking app security, revealing privacy risks and vulnerabilities through static and dynamic analysis. Gain insights into global banking app practices and their implications.
Hopping on the CAN Bus
Explore automotive CAN bus systems, learn to send/receive messages, and discover vulnerabilities using CANard, an open-source toolkit for scripting CAN bus tasks.
From Zero to Secure in One Minute
Automated cloud security tool for rapid instance lifecycle: pre-configured, patched, encrypted, and auto-mitigated. Introduces "Cloudefigo" for accelerated security in dynamic cloud environments.
Manna from Heaven - Improving the State of Wireless Rogue AP Attacks
Explore advanced techniques for enhancing wireless rogue AP attacks, including network spoofing and authentication bypass. Learn about a new toolkit for implementing these methods effectively.
The Underground Ecosystem of Credit Card Frauds
Explore the aftermath of POS malware breaches, uncovering the organized network behind credit card fraud, from purchasing stolen data to creating counterfeit cards and cashing out.
Bar-Mitzvah Attack - Breaking SSL with 13-Year Old RC4 Weakness
Uncover SSL vulnerabilities using RC4 cipher weaknesses. Learn about passive eavesdropping attacks on TLS connections and techniques to recover secret data from encrypted communications.
Information Technology Systems in a Post-Silicon World
Explore post-silicon IT systems, emerging architectures, and AI's impact on InfoSec. Discover how innovation addresses Moore's Law limitations and shapes the future of technology and security.
I'm Not a Human - Breaking the Google reCAPTCHA
Explore techniques to bypass Google's reCAPTCHA using risk analysis manipulation, deep learning for image recognition, and automated solving methods. Discusses implications for CAPTCHA security.
Hey, Your Parcel Looks Bad - Fuzzing and Exploiting Parcelization Vulnerabilities in Android
Explore Android's Binder IPC vulnerabilities through fuzzing and exploitation techniques. Learn to identify, analyze, and exploit "BadParcel" issues for privilege escalation in high-privilege processes.
Never Trust Your Inputs - Causing Catastrophic Physical Consequences From The Sensor
Explore security vulnerabilities in analog-to-digital conversion for industrial control systems. Learn how attackers can manipulate sensor data to cause physical consequences while evading detection.
Mapping the Wireless IoT
Explore wireless IoT security challenges, signal identification techniques, and best practices for revealing unknown signals. Includes a demo of a new tool for mapping radio spectrum and identifying devices.
Break Out of The Truman Show - Active Detection and Escape of Dynamic Binary Instrumentation
Explore active detection techniques for Dynamic Binary Instrumentation, focusing on exploiting weaknesses and escaping control. Learn to identify and overcome DBI environments in cybersecurity.