Pass the Hash 2 - The Admin's Revenge
Explore advanced strategies to detect and prevent Pass-The-Hash attacks in Windows networks, addressing vulnerabilities and enhancing enterprise security against lateral movement.
How to Grow a TREE from CBASS
Innovative binary analysis toolset for cross-platform programs. Integrates with IDA Pro, enabling interactive visualization and on-demand analysis for efficient reverse engineering and vulnerability detection.
Pass the Hash and Other Credential Theft - Reuse - Mitigating Risk
Explore Pass the Hash attacks and Microsoft's recommended mitigations, including credential theft prevention, authentication policies, and platform changes for enhanced cybersecurity.
Hot Knives Through Butter - Bypassing Automated Analysis Systems
Explores advanced techniques used by malware to evade automated analysis systems, including extended sleep calls, mouse click triggers, and timed activation. Provides insights for security professionals on evolving threats.
BlackBerryOS 10 from a Security Perspective
Comprehensive analysis of BlackBerryOS 10's security architecture, exploring attack surfaces, privilege escalation, remote entry points, rootkit persistence, and the effectiveness of BlackBerry Balance.
Using Online Activity as Digital Fingerprints to Create a Better Spear Phisher
Explore data mining and NLP techniques to profile online activity, creating digital fingerprints for enhanced social engineering. Learn to analyze user interactions, vocabulary, and communication patterns.
OptiROP - Hunting for ROP Gadgets in Style
Discover efficient ROP gadget hunting with OptiROP, a tool using semantic queries for quick, precise results across executable formats on x86/x64 architectures. Simplify shellcode development.
Password Hashing - The Future is Now
Explore the future of password hashing, its challenges, and the Password Hashing Competition initiative to develop improved methods for securing digital systems.
Bochspwn - Identifying 0-Days via System-Wide Memory Access Pattern Analysis
Innovative approach to discovering kernel vulnerabilities using CPU-level instrumentation and memory access pattern analysis. Introduces "Bochspwn" project, which identified numerous Windows kernel vulnerabilities.
Mobile Malware - Why the Traditional AV Paradigm Is Doomed
Explore mobile malware threats, limitations of traditional antivirus methods, and innovative approaches like cloud-based screening and hardware-supported security solutions for protecting mobile devices.
CMX - IEEE Clean File Metadata Exchange
Explore IEEE's CMX system for efficient software whitelisting, reducing false positives in security through metadata exchange without copyright concerns.
Malicious File for Exploiting Forensic Software
Exploiting vulnerabilities in forensic software file viewers through malicious files, demonstrating code execution and DoS attacks. Includes fuzzing techniques, vulnerability analysis, and countermeasures.
The Web Is Vulnerable - XSS Defense on the BattleFront
Comprehensive analysis of real-world XSS vulnerabilities and attacks, presenting advanced protection methods and introducing detectXSSlib, a new tool for real-time XSS detection.
End-to-End Analysis of a Domain Generating Algorithm Malware Family
Comprehensive analysis of a Domain Generating Algorithm malware family, covering deobfuscation, DGA analysis, sinkholing, and attribution of the malware's author and accomplices.
Black-Box Assessment of Pseudorandom Algorithms
Explore flaws in common PRNGs, learn to identify and reverse-engineer them through black-box analysis, and discover efficient algorithms for predicting past and future outputs.
Mainframes - The Past Will Come Back to Haunt You
Unveiling mainframe security: Learn configuration, access methods, and potential vulnerabilities in this eye-opening talk for IT security professionals unfamiliar with mainframe systems.
Pwnie Awards
Celebrate and roast the best and worst in information security at the annual Pwnie Awards ceremony, featuring humor, recognition, and industry insights.
Catching Insider Data Theft With Stochastic Forensics
Discover stochastic forensics: a novel technique for detecting insider data theft by analyzing statistical patterns in file systems, even months after the incident occurs.
Shelters or Windmills - The Struggle For Power and Information Advantage
Explore the historical power dynamics of information advantage and its impact on societal shifts, drawing parallels to today's digital revolution and its implications for the future.
Security Issues Affecting Internet Transit Points and Backbone Providers
Explore security vulnerabilities in Internet infrastructure, focusing on BGP4 protocol issues, IP spoofing, and routing attacks. Learn about potential threats to network integrity and financial implications for publicly traded companies.
An Introduction to SPIKE
Explore SPIKE, a powerful fuzzing tool for discovering software vulnerabilities. Learn its applications, techniques, and potential impact on cybersecurity testing and exploit development.