Hunting Asynchronous Vulnerabilities
Explore techniques for uncovering hidden vulnerabilities in backend systems using exploit-induced callbacks. Learn to detect and exploit asynchronous issues across various technologies and platforms.
Old Dog, New Tricks - Forensics With PowerShell
Explore PowerForensics: a PowerShell-based toolset for live digital forensics and incident response, enabling efficient investigation of advanced cyber threats without system imaging.
Attacking VxWorks - From Stone Age to Interstellar
Explore vulnerabilities in VxWorks, a real-time operating system, from historical exploits to cutting-edge attack techniques. Gain insights into securing critical infrastructure and embedded systems.
Forging the USB Armory
Explore the development of the USB armory, an open-source hardware device for security applications. Learn about its architecture, security features, and potential uses as a trusted USB device.
Hackers in the Wire and Drones Oh My!
Explore powerful, inexpensive penetration testing using ARM-based devices, from wired/wireless dropboxes to flying drones. Control actions remotely, with devices like BeagleBone Black and Raspberry Pi 2.
Reverse Engineering and Exploiting Font Rasterizers - The OpenType Saga
Explore critical vulnerabilities in OpenType font handling across popular software, revealing potential for arbitrary code execution and bypassing exploit mitigations. Learn about reverse-engineering techniques and in-depth vulnerability analysis.
Old Dog, New Tricks - Forensics With PowerShell
Explore PowerForensics for live digital investigations using PowerShell. Learn techniques for incident response, threat detection, and forensic analysis without imaging drives.
Passive IPS Reconnaissance and Enumeration - False Positive Abuse
Explore techniques for enumerating network defenses by exploiting false positives in Intrusion Prevention Systems, revealing valuable information about security measures to potential attackers.
Dark Fairytales from a Phisherman Vol II
Explore advanced phishing techniques, leveraging tools like Phishing Frenzy and BeEF for effective campaigns. Learn from real-world statistics and engaging hacking stories to enhance your cybersecurity skills.
Indicators of Compromise - From Malware Analysis to Eradication
Learn to identify, analyze, and eradicate unknown malware in corporate networks using freely available tools. Gain practical skills for effective threat detection and response.
Introduction to Reverse Engineering C++
Learn techniques for reverse engineering C++ programs, including analyzing compiled code, understanding memory layouts, and identifying key structures. Gain practical skills for software analysis and security research.
Analyzing Malicious Office Documents
Learn techniques to analyze malicious Microsoft Office documents using Python tools like oledump and YARA rules. Hands-on exercises guide you through step-by-step analysis without requiring Office software.
Stegosploit - Drive by Browser Exploits Using Only Images
Innovative technique encoding browser exploits in images, combining steganography and polyglots for undetectable delivery. Explores implementation, challenges, and implications for cybersecurity.
Smart Muttering - A Story and Toolset for Smart Meter Platform
Explore smart meter security vulnerabilities and a new open-source framework for embedded device analysis. Learn about critical infrastructure risks and tools for assessing obscure networks and protocols.
DDoS Mitigation Epic Fail Collection
Explore 10 critical DDoS mitigation failures, their technical details, and recommended solutions. Learn from industry leaders' mistakes to enhance your defense strategies against sophisticated attacks.
Meaningful Measurement - It’s About Time We Got This Right
Explores flaws in current cybercrime metrics, advocating for standardized, business-focused measurements to improve threat intelligence and risk analysis across all enterprise sizes.
Automated Extraction of Configuration and Payloads from Sophisticated Malware
Automated malware analysis system for extracting payloads, configurations, and indicators from sophisticated malware, reducing time and skill requirements for threat intelligence.
Attacks on SAP HANA Platform
Explore vulnerabilities in SAP HANA platform, including on-premise, cloud, and IoT deployments. Learn attack vectors, technical details, and prevention strategies for securing critical business data.
Leverage One-shot UAF to a Minigun
Exploración de técnicas avanzadas de explotación de vulnerabilidades Use-After-Free en Adobe Flash, incluyendo el método UAUAF para obtener acceso completo a la memoria y ejecución de código arbitrario.
Not Only Frogs Can Hop
Explore novel VLAN hopping methods using SNMP, including live demos and the release of Frogger 2 tool for automated and improved network security testing.
Ways to Brick Your Hardware
Explore common hardware hacking pitfalls, recovery methods, and prevention strategies. Learn from experts' experiences to avoid damaging your projects and gain confidence in hardware experimentation.