Abusing Mixed Vendor Kerberos Stacks - Exploiting Windows AD and Linux Authentication
Discover security vulnerabilities in mixed Kerberos environments and learn how to exploit weaknesses between Windows Active Directory and Linux/Unix systems for privilege escalation.
There Are No Mushroom Clouds in Cyberwar - The Evolution of Cyber Warfare Strategy
Explore the evolution of cyberwarfare strategy, from Reagan-era misconceptions to modern defensive approaches, examining real-world impacts and the crucial role of private sector collaboration.
Physical Security Assessment: Doors, Cameras, and Mantraps - A Practical Guide
Discover practical approaches to physical security assessments, from door systems to mantraps, while learning effective client communication techniques for security consulting.
Engineers and Exploits: The Quest for Security
Dive into the intersection of engineering and security exploits, exploring critical vulnerabilities and defensive strategies with security experts Spyros Gasteratos and Andra.
Inside Dash Cam Custom Protocols and Security Vulnerabilities
Delve into comprehensive security analysis of network-connected dash cams, exploring vulnerabilities in boot processes, custom protocols, and configuration systems across multiple international manufacturers.
Exposing Security Vulnerabilities in Large Off-Grid Solar Systems
Uncover critical security vulnerabilities in solar management systems and their potential impact on national infrastructure through real-world exploitation examples and risk analysis.
Unlocking the Gates: Hacking Industrial Remote Access Solutions
Dive into the vulnerabilities of industrial VPN gateways, exploring security flaws in remote access solutions and learning techniques to identify and understand potential system compromises.
Mutual Authentication Vulnerabilities in Physical Access Control Systems
Explore physical access control system vulnerabilities, authentication weaknesses, and practical exploit techniques, featuring live demonstrations with HID readers and security tools.
Compromising Electronic Loggers and Creating Truck-to-Truck Worm - Security Vulnerabilities in ELD Systems
Discover critical security vulnerabilities in Electronic Logging Devices (ELDs) and their implications for truck network security, from reverse engineering to proof-of-concept attacks and industry-wide security reforms.
Exploiting Security Vulnerabilities in Microhard Radio Equipment
Uncover critical security vulnerabilities in Microhard's radio equipment, including command injections and buffer overflows, while exploring implications for SCADA and utility systems.
Bypass Techniques for Door Entry Without Lock Manipulation
Discover advanced door bypass techniques and security vulnerabilities, exploring egress systems, access control hardware, and alternative entry methods without lock manipulation.
Prototype Pollution Leading to Remote Code Execution in NodeJS
Delve into prototype pollution vulnerabilities in Node.js, exploring how they enable remote code execution, analyzing real-world exploits, and understanding recent security mitigations.
Real-Time Video and Audio Deep Fake Impersonation - A Security Demonstration
Explore real-time deepfake technology and its potential security risks through practical demonstrations of CEO impersonation using open-source tools and accessible hardware.
VDA Shenanigans: Attacking and Defending Vehicle Diagnostics Adapters
Dive into vehicle diagnostics adapter security through hardware reverse engineering, firmware analysis, and defensive strategies for automotive systems protection.
HL7Magic: Medical Data Hacking and Security Testing Tool
Discover how to intercept and analyze HL7 medical device communications using HL7Magic, a new security testing tool designed to identify vulnerabilities in healthcare data transmission systems.
Augmented Reality and Implications on Mobile Security
Explore critical privacy and security challenges in augmented reality technology, focusing on mobile device vulnerabilities and protective measures for AR applications.
Ghost On The Wire
Explore cutting-edge virtual reality security concepts and challenges through expert insights from DEF CON 31's DCGVR Village presentation on digital vulnerabilities.
Cybersecurity Education: Making the Case for K-12 Privacy and Security Curriculum
Explore how to integrate essential cybersecurity and data privacy education into K-12 curricula, addressing the critical need for early digital safety awareness and institutional protection measures.
From Theory to Reality: Demonstrating SPARTA Techniques Through Ground Infrastructure Attacks
Discover how to exploit space mission vulnerabilities through ground infrastructure attacks, focusing on SPARTA techniques and man-in-the-middle exploits for spacecraft communications.
No Symbols When Reversing? No Problem - Bring Your Own Symbols for Binary Analysis
Discover efficient techniques for analyzing unknown functions in binaries, focusing on portable symbol creation and management using Ghidra, with practical examples from Golang-based malware analysis.
Finding Zero-Day Vulnerabilities in Vilo Home Routers - Security Research Process and Discoveries
Discover how student researchers uncovered 9 zero-day vulnerabilities in Vilo routers through hardware hacking, firmware analysis, and cloud infrastructure investigation, highlighting IoT security challenges.