Here Be Backdoors - A Journey into the Secrets of Industrial Firmware
Exploring vulnerabilities in industrial control systems through firmware analysis, revealing backdoors and security flaws in critical infrastructure devices like PLCs, smart meters, and SCADA systems.
When Security Gets in the Way - Pen Testing Apps That Use Certificate Pinning
Explore tools and techniques for defeating certificate pinning in mobile apps during black-box testing, enabling interception of SSL traffic on both iOS and Android platforms.
How Many Bricks Does It Take to Crack a Microcell
Journey through reverse engineering a 3G microcell, covering hardware hacking, kernel reversing, firmware manipulation, software reversing, networking, memory forensics, and social engineering. Insights into successes, failures, and lessons learned.
Hacking the Corporate Mind - Using Social Engineering to Improve Organizational Security Acceptance
Discover social engineering techniques to improve organizational security acceptance, bridging the gap between users and InfoSec teams for better awareness and policy adherence.
PinPadPwn
Explore vulnerabilities in payment terminals, including memory corruption issues and potential attack vectors. Learn about code execution risks and discuss profitable payloads for attackers.
Windows Phone 7 Internals and Exploitability
Comprehensive analysis of Windows Phone 7 security, revealing hidden internals through reverse engineering. Explores potential vulnerabilities and exploitation techniques in the OS and vendor customizations.
Hardware Backdooring is Practical
Explores hardware backdooring through Rakshasa malware, demonstrating permanent BIOS infection, NX bit disabling, and security lowering across various motherboards using open-source components like Coreboot.
SSRF vs Business Critical Applications
Explore SSRF vulnerabilities in business-critical applications, focusing on SAP systems. Learn about XXE Tunneling and its potential to bypass security restrictions, with practical examples and attack scenarios.
Recent Java Exploitation Trends and Malware
Explore recent Java vulnerabilities, exploitation techniques, and malware trends. Learn about sandbox evasion, multi-platform attacks, and challenges in analyzing obfuscated Java exploits.
CuteCats.exe and the Arab Spring
Analysis of malware targeting activists during Middle Eastern uprisings, exploring distribution methods and impact on digital dissent and online communities.
Smashing the Future for Fun and Profit
Visionary security experts discuss emerging threats, technological shifts, and societal impacts on cybersecurity over the next 15 years, offering insights into future challenges and opportunities in the field.
Probing Mobile Operator Networks
Explore techniques for probing cellular networks, uncovering diverse connected devices, and discussing security implications of findings from network investigations.
Hookin Ain't Easy - BeEF Injection with MITM
Explore browser exploitation techniques using MITM attacks and the BeEF Framework. Learn to hook browsers without social engineering or XSS, and maintain connections for advanced penetration testing.
Cellular Exploitation on a Global Scale - The Rise and Fall of the Control Protocol
Explore hidden cellular device controls, their vulnerabilities, and potential for global exploitation. Learn reverse engineering techniques, protocol analysis, and proof-of-concept exploits for major platforms and networks.
Mission mPOSsible
Explore vulnerabilities in mobile payment systems, including code execution through various input vectors. Live demonstrations showcase attack methods, emphasizing security weaknesses in current mPOS solutions.
The State of Incident Response
Explore economic and psychological factors shaping incident response in cybersecurity, examining trends, challenges, and potential solutions for protecting networks against sophisticated attacks.
BadUSB - On Accessories that Turn Evil
Explores USB security vulnerabilities, demonstrating malware in controller chips, device spoofing, and system compromises. Discusses potential defenses against USB-based attacks.
Breaking the Security of Physical Devices
Explore vulnerabilities in everyday devices like cars and home alarms. Learn about eavesdropping, replay attacks, and code analysis techniques to understand and mitigate security risks in physical systems.
Oracle Data Redaction is Broken
Explore vulnerabilities in Oracle's data redaction service, including bypass techniques and privilege escalation attacks, with insights on protection and compliance implications.
Cybersecurity as Realpolitik
Explore the intersection of cybersecurity and political realism, examining power dynamics and policy implications in the digital realm.
Beyond ‘Check The Box’ - Powering Intrusion Investigations
Explore advanced intrusion investigation techniques, focusing on DHCP logging, Kerberos tickets, and DNS resolutions to enhance cybersecurity capabilities and identify compromise indicators.