Jailbreaking an Electric Vehicle in 2023 - What It Means to Hotwire Tesla's x86-Based Seat Heater
Explore Tesla's advanced car computers and potential hacks to unlock premium features without payment. Delve into attacks on AMD-based infotainment systems in recent models.
Smashing the State Machine - The True Potential of Web Race Conditions
Explore advanced web race-condition attacks beyond limit-overrun exploits. Learn to exploit state machines in websites, enabling data forgery, token misrouting, and backdoor masking across high-profile platforms.
Cracking With Automated USB Fuzz
Explore automated USB fuzzing techniques to detect vulnerabilities in computer systems, including simulating USB cameras and exploiting Windows Hello using infrared images.
Critical Information Infrastructure Protection - Challenges & Opportunities
Explore challenges and opportunities in Critical Information Infrastructure protection with expert panelists discussing cybersecurity strategies, regulatory frameworks, and emerging threats.
Unlocking Any Door in 21st Century - Immersion in Bio-Security
Explore biometric authentication vulnerabilities, AI/ML risks, and creative hacking techniques. Learn about data privacy threats and strategies to bypass liveness checks in modern security systems.
Lifting the Fog of War
Explore MS-RPC's role in Windows, its vulnerabilities, and defensive mechanisms. Learn to utilize built-in features for tracking and defending against RPC-based attacks, with practical tools and signatures.
Lessons Learned from a Red Teamer's Journey into the Kernel
Explore kernel-based attacks, including rootkit drivers and BYOVD, from a red teamer's perspective. Learn implementation techniques, defense strategies, and potential future attack vectors in kernel-level operations.
A Celebration of Cyber Community Action
Inspiring talk on cybersecurity community's impact, highlighting collaborative efforts, advocacy success, and future challenges in digital risk reduction for all citizens.
Nemesis
Introducing Nemesis: A revolutionary system unifying post-exploitation data for automated processing, enhancing offensive workflows, and enabling data-driven research in cybersecurity.
Precision Munitions for Denial of Service
Explore targeted DoS attacks using precision-crafted requests to cripple services while evading WAF countermeasures. Learn about an overlooked CVSS 7.5 vulnerability as a potent cyber weapon.
Snookered in the Pool Room
Unconventional approach to investigating cybercrime, focusing on a data centre hack case study. Explores forensic profiling, social engineering, and international law enforcement collaboration.
The Art of the Breach
Comprehensive guide to physical security breaching, from reconnaissance to exit strategies. Explores various entry methods, overcoming obstacles, and combining infosec with first responder techniques.
Getting In - Initial Access - 2023 and Beyond
Explore cutting-edge techniques for gaining initial access in cybersecurity, focusing on creative social engineering methods that bypass modern corporate defenses and email filters.
Don't You Know Who I Think I Am?
Explores the evolution of digital identities, from passwords to biometrics, highlighting challenges and the need for government leadership in authentication technologies.
Sleeping with One AI Open
Explore adversarial attacks on AI/ML systems, their real-world implications, and mitigation strategies. Learn about potential risks and security considerations in AI-driven technologies across various sectors.
The New SaaS Cyber Kill Chain
Exploring the evolving cyber kill chain in SaaS-native organizations, discussing new attack vectors, lateral movement techniques, and persistent threats in cloud-based environments.
Red Team Tales - 7 Years of Physical Penetration Testing
Insider tales from 7 years of physical penetration testing, revealing techniques for breaching high-security facilities and debunking myths about physical security across various industries.
Missed Opportunities
Explore overlooked security vulnerabilities and potential attack vectors in software systems with insights from a leading cybersecurity expert.
Uncursing the ncurses
Explore memory corruption vulnerabilities in ncurses, their impact on system security, and the journey of discovery from environment variable to potential privilege escalation.
Ghidriff
Explore ghidriff, an open-source Python package for efficient binary diffing using Ghidra. Learn about its command-line interface, function matching heuristics, and markdown output for simplified patch analysis and vulnerability research.
A Security Research Journey - How the Mobile Industry Met Hackers in the Middle
Explore the mobile industry's collaboration with hackers to enhance security, from informal relationships to a cross-industry vulnerability disclosure scheme, featuring key hacks and future challenges.