Improving Unicode Attacks With Deep Learning
Exploración de ataques Unicode mejorados con aprendizaje profundo, creando un diccionario de caracteres confundibles para desarrollar herramientas ofensivas sofisticadas y nuevos procedimientos de prueba de aplicaciones.
HDMI - Pwning HDMI For Fun And Profit
Explore HDMI vulnerabilities through protocol analysis, fuzzing techniques, and real-world exploitation, showcasing potential security risks in AV devices and demonstrating practical attack vectors.
Automated Discovery of Logical Privilege Escalation Bugs in Windows 10
Automated discovery of logical privilege escalation vulnerabilities in Windows 10 services, using simulated user interactions and interface calls. Includes methodology, ALPC analysis, and system implementation.
Pwning Centrally-Controlled Smart Homes
Exploring vulnerabilities in centrally-controlled smart homes, demonstrating remote attacks on IoT devices like door locks, gates, and gas valves, and discussing analytical methods for smart home hacking.
SeasCoASA - Exploiting A Small Leak In A Great Ship
Exploiting vulnerabilities in Cisco ASA firewalls: New techniques to bypass protection mechanisms, heap exploitation strategies, and disclosure of a 0-day vulnerability affecting major ASA versions.
Attacking GSM - Alarms, Smart Homes, Smart Watches and More
Explore vulnerabilities in GSM devices like alarms and smartwatches. Learn number spoofing, brute-force attacks, and mobile operator exploits. Gain hands-on experience and develop security requirements for GSM systems.
For The Win - The Art of the Windows Kernel Fuzzing
Explore advanced Windows kernel fuzzing techniques, including a new method and custom tool for discovering vulnerabilities in kernel objects and their relationships.
Deobfuscate UEFI - BIOS Malware and Virtualized Packers
Practical approach to reverse engineering obfuscated BIOS/UEFI malware and virtualized packers, using tools and techniques for code simplification and threat analysis.
The Birdman - Hacking Cospas-Sarsat Satellites
Explore vulnerabilities in satellite-based rescue systems, focusing on the International Cospas-Sarsat Programme. Learn about eavesdropping, spoofing, and active attack techniques on satellite communications.
How to Dump, Parse, and Analyze i.MX Flash Memory Chips
Explore techniques for dumping, parsing, and analyzing i.MX flash memory chips, focusing on NXP i.MX architecture in embedded systems. Learn about custom flash memory management and tools for recovering filesystems.
fn_fuzzy - Fast Multiple Binary Diffing Triage With IDA
Efficient binary diffing tool for IDA Pro, using fuzzy hashes to quickly compare and import function data from multiple IDBs, enhancing malware analysis productivity.
Hidden Agendas - Bypassing GSMA Recommendations on SS7 Networks
Explores vulnerabilities in SS7 networks, revealing how attackers can bypass security measures to intercept messages and steal money. Discusses the implications for 2G/3G users and highlights a critical flaw in current protection tools.
Attacking Encrypted VOIP Protocols
Explore techniques for intercepting and decrypting encrypted SIP sessions, and learn about a new tool for streamlined password recovery in VOIP protocols.
Ghost Tunnel 2.0 - Blue Ghost
Explore covert Bluetooth communication using Ghost Tunnel 2.0, enabling multiple secure tunnels for file transfer and command execution without detection or inspection by most protection systems.
Bounty - Building a Coordinated Bug Disclosure Bridge for the EU
Exploring the creation of a new EU-endorsed bug bounty platform, focusing on international collaboration, security standards, and benefits for both hunters and companies.
PatrOwl - The Red Flavour of SOC Automation and Orchestration
Explore PatrOwl, an innovative solution for automating cybersecurity tasks. Learn how it integrates various tools, analyzes results, and predicts attack scenarios to enhance SOC efficiency and address the cybersecurity talent shortage.
Hiding a Secret Distributed Chat System in 802.11 Management Frames
Explore a covert distributed chat system using 802.11 management frames, featuring AES encryption, extended network coverage, and data exfiltration capabilities for secure communications.
A Decade of Infosec Tools
A quantitative study of 2000+ infosec tools from the past decade, analyzing their evolution and providing insights on creating effective cybersecurity tools.
Secure and Scalable Anomaly-Based Network Intrusion Detection
Presentation on a secure, scalable framework for anomaly-based network intrusion detection, implemented in Go. Explores feature extraction, data collection, and machine learning applications for detecting network threats.
Reversing Mobile Malware
Explore live malware reversing techniques for Windows and Android, focusing on methodology and essential tools for identifying and analyzing malicious software samples.
Hacking the 0day Market
Exploring the 0day vulnerability market's inefficiencies and Crowdfense's innovative approach to improve standards, processes, and outcomes for all stakeholders in the cybersecurity ecosystem.