Exploiting Lawful Intercept to Wiretap the Internet
Explores security vulnerabilities in Cisco's lawful intercept technology, demonstrating how attackers could exploit these weaknesses for unauthorized surveillance. Offers recommendations for network operators and interface redesign.
Hacking Oracle 11g
Explore advanced techniques for exploiting vulnerabilities in Oracle 11g databases, including privilege escalation and data manipulation strategies.
Preventing Child Neglect in DNSSEC-bis Using Lookaside Validation
Explore DNSSEC-bis and Lookaside Validation techniques to enhance DNS security and prevent child neglect in domain name systems.
Owning Anti-Virus - Weaknesses in a Critical Security Component
Explore critical vulnerabilities in anti-virus software, uncovering weaknesses that could compromise system security and discussing potential exploitation techniques.
Building Robust Backdoors in Secret Symmetric Ciphers
Explore techniques for creating undetectable backdoors in symmetric ciphers, examining historical cases and discussing innovative approaches to cryptographic vulnerabilities.
Ozone HIPS - Unbreakable Windows
Explore cutting-edge Host Intrusion Prevention System technology for Windows, enhancing system security and resilience against cyber threats.
The Art of Defiling - Defeating Forensic Analysis
Explore advanced techniques for evading forensic analysis and protecting digital privacy in this comprehensive cybersecurity presentation by The Grugq.
Advanced SQL Injection in Oracle Databases
Explore advanced SQL injection techniques in Oracle databases, focusing on vulnerabilities, exploitation methods, and defensive strategies for database security professionals.
NX - How Well Does It Say NO to Attacker's Execution Attempts
Explore the effectiveness of NX technology in preventing attacker execution attempts, analyzing its strengths and potential vulnerabilities in cybersecurity defense.
The Myth of Twelve More Bytes - Security on Post-Scarcity Internet
Exploring security implications of IPv6, DNSSEC, and new top-level domains on enterprise IT, fraud prevention, and network defense in the evolving Internet landscape.
Scaling Up Baseband Attacks - More Unexpected Attack Surface
Exploring unexpected attack vectors in baseband processors, revealing vulnerabilities in cellular network communication and GPS systems that can be exploited remotely over IP connections.
ModSecurity as Universal Cross-Platform Web Protection Tool
Explore ModSecurity's evolution into a cross-platform WAF, its early attack detection capabilities, and its use of OWASP Core Rule Set for protecting Apache, IIS, and nginx servers.
Looking into the Eye of the Meter
Explore smart meter vulnerabilities, from memory acquisition to hardware sniffing. Learn about authentication credential theft and IR port interaction techniques used by criminals targeting utility infrastructure.
Windows 8 Heap Intervals
Explore Windows 8 heap exploitation techniques, memory management changes, and security features. Learn about user-land and kernel-land perspectives, allocation processes, and mitigation strategies.
The Christopher Columbus Rule and DHS
Explore DHS's innovative cybersecurity initiatives, including threat information sharing, research funding, and career opportunities in this talk by Deputy Under Secretary Mark Weatherford.
The Subway Line 8 - Exploitation of Windows 8 Metro Style Apps
Exploring Windows 8 Metro-style app security, AppContainer sandbox, and potential vulnerabilities. Demonstrates techniques to bypass security measures and access restricted resources.
We Have You by the Gadgets
Explore Windows gadget platform vulnerabilities and attack vectors. Learn about creating malicious gadgets, exploiting legitimate ones, and uncovering flaws in published gadgets.
Hacking with WebSockets
Explore WebSocket vulnerabilities, privacy implications, and security risks. Learn to deploy WebSockets securely and use them in hacking frameworks. Gain insights into HTML5 security challenges.
HTML5 Top 10 Threats - Stealth Attacks & Silent Exploits
Explores top 10 HTML5 security threats, including CORS attacks, clickjacking, XSS, web storage vulnerabilities, and more. Demonstrates real-life examples and discusses defense strategies against emerging attack vectors.
The Info Leak Era on Software Exploitation
Explore advanced techniques for exploiting software vulnerabilities through information leaks, focusing on defeating ASLR and converting various vulnerabilities into effective info leaks.
Digging Deep Into the Flash Sandboxes
Explore Flash Player sandbox implementations, their architectures, mechanisms, and security limitations. Learn about potential vulnerabilities and sandbox escape techniques in this in-depth analysis.