How the Feds Caught Russian Mega-Carder Roman Seleznev
Uncover the intricate investigation that led to the capture of Russian hacker Roman Seleznev, responsible for massive credit card fraud and point-of-sale hacks, through electronic evidence and international cooperation.
What Malware Authors Don't Want You to Know - Evasive Hollow Process Injection
Explore undocumented hollow process injection techniques used by malware authors to evade detection and blend with legitimate system processes.
Remotely Compromising iOS via Wi-Fi and Escaping the Sandbox
Explore iOS vulnerabilities through Wi-Fi networks, including sandbox escapes and kernel bugs. Learn about attack vectors, exploitation techniques, and security implications for mobile devices.
Fried Apples - Jailbreak DIY
Explore iOS jailbreaking techniques, including persistence, patchfinding, and kernel protection bypass. Learn about internal structures and low-level details of modern jailbreaks for Apple devices.
Why We Are Not Building a Defendable Internet
Exploring the economic and political challenges in cybersecurity, examining incentives of key players, and discussing why current structures fail to produce desired security levels.
The Seven Axioms of Security
Explore seven axioms for implementing proactive defense strategies in cybersecurity. Learn how to transition from reactive to proactive measures and discover the blueprint for future defense architecture.
ARMageddon - How Your Smartphone CPU Breaks Software-Level Security and Privacy
Explore smartphone CPU vulnerabilities that compromise security and privacy, revealing potential threats to sensitive data and personal information without requiring permissions.
EGO MARKET - When People's Greed for Fame Benefits Large-Scale Botnets
Uncover how botnets exploit social media for profit, using Linux/Moose 2.0 as a case study. Learn detection techniques and insights into the fake follower economy.
Breaking BHAD - Abusing Belkin Home Automation Devices
Exploración de vulnerabilidades en dispositivos de automatización del hogar Belkin WeMo, revelando fallas de seguridad y demostrando ataques potenciales en la infraestructura IoT.
Witchcraft Compiler Collection - Towards Self Aware Computer Programs
Explore innovative reverse engineering techniques to create self-aware binary code through relinking, binary reflection, and automated API prototyping, enhancing code reuse and debugging capabilities.
How Your DRAM Becomes a Security Problem
Explore DRAM security vulnerabilities and side-channel attacks targeting row buffers, with implications for various devices and systems regardless of software or OS.
Exploiting Curiosity and Context - How to Make People Click on a Dangerous Link
Explores how curiosity and context influence clicking on dangerous links, analyzing user behavior and reasoning to improve cybersecurity strategies and protection mechanisms.
Applied Machine Learning for Data Exfil and Other Fun Topics
Explore machine learning applications in cybersecurity, including data exfiltration, network mapping, and botnet detection. Hands-on examples and tool demonstrations provided for practical implementation.
A Journey From JNDI-LDAP Manipulation to Remote Code Execution Dream Land
Explore JNDI/LDAP vulnerabilities and exploitation techniques, from basic concepts to advanced remote code execution methods in Java-based enterprise applications.
Hell on Earth - From Browser to System Compromise
Explore cutting-edge browser exploitation techniques and kernel vulnerabilities from Pwn2Own 2016. Analyze attack vectors, root causes, and remediation strategies for achieving system-level access.
The Linux Kernel Hidden Inside Windows 10
Explore the Linux kernel in Windows 10, its implementation, security implications, and potential vulnerabilities. Learn about system calls, process management, and attack surfaces in this unique OS integration.
HTTP/2 & QUIC - Teaching Good Protocols to Do Bad Things
Explore multiplexing attacks in QUIC and HTTP/2 protocols, their impact on network security, and defense strategies against potential threats in modern web technologies.
Can You Trust Me Now? An Exploration Into the Mobile Threat Landscape
Comprehensive exploration of mobile security, examining hardware, software, and network components across platforms to uncover vulnerabilities and discuss protective measures for data and devices.
Breaking Payment Points of Interaction
Explore vulnerabilities in payment systems, focusing on bypassing protections in points of interaction devices. Live demonstrations showcase EMV bypassing and PIN protection avoidance.
Capturing 0Day Exploits With Perfectly Placed Hardware Traps
Innovative hardware-assisted approach to prevent control-flow hijack attacks, using processor features for real-time detection and prevention of abnormal branches in Windows and Linux systems.
Beyond the MCSE - Active Directory for the Security Professional
Comprehensive exploration of Active Directory's critical components, security features, and vulnerabilities, empowering security professionals to better defend enterprise resources against sophisticated attacks.