Debug for Bug - Crack and Hack Apple Core by Itself
Explore Apple kernel vulnerabilities through fuzzing, including double free and out-of-bounds issues. Learn about debugging and fuzzing techniques for uncovering security flaws in Apple's core systems.
Operational Templates for State-Level Attack and Collective Defense of Countries
Explore templates for nation-level cyber attacks and defense strategies, examining various time horizons, attribution levels, and collective approaches to protect countries in cyberspace.
Infighting Among Russian Security Services in the Cyber Sphere
Explore the complex dynamics of Russian security agencies in cyberspace, examining conflicts, international campaigns, and their implications for global cybersecurity.
Exploring the New World - Remote Exploitation of SQLite and Curl
Discover new methods for finding vulnerabilities in SQLite and Curl through fuzzing and manual auditing, including insights on "Magellan" and "Dias" vulnerabilities.
Critical Zero Days Remotely Compromise the Most Popular Real-Time OS
Explore critical vulnerabilities in VxWorks, a popular real-time OS, and their potential for remote network breaches and device exploitation. Includes live demonstrations on various devices, including medical equipment.
Behind the Plexiglass Curtain - Stats and Stories from the Black Hat NOC
Insider insights into Black Hat's network operations: statistics, anecdotes, and revelations from the Network Operations Center team's annual debrief.
An ACE Up the Sleeve - Designing Active Directory DACL Backdoors
Explore Active Directory DACL backdoors, their offensive potential, and stealth techniques. Learn about control relationships, elevation paths, and persistence methods in AD objects.
Cracking the Lens - Targeting HTTP's Hidden Attack-Surface
Explore hidden attack surfaces in modern web infrastructure, focusing on transparent systems for performance and analytics. Learn to identify and exploit overlooked vulnerabilities.
Broadpwn - Remotely Compromising Android and iOS via a Bug in Broadcom's Wi-Fi Chipsets
Explore a critical Wi-Fi vulnerability affecting millions of Android and iOS devices, its technical details, and potential for remote exploitation without user interaction.
Man-in-the-SCADA - Anatomy of Data Integrity Attacks in Industrial Control Systems
Explore data integrity attacks in industrial control systems, focusing on attacker perspectives and strategies for unauthorized access to control networks and equipment.
Conclusions and Key Takeaways from Black Hat Europe 2016
Insightful discussion on critical InfoSec trends and their impact on future strategies, featuring industry experts at Black Hat Europe 2016's closing session.
Drop the ROP - Fine-Grained Control-Flow Integrity for the Linux Kernel
Explore fine-grained Control-Flow Integrity for Linux kernel security, addressing ROP attacks and dynamic kernel modules. Learn advanced mitigation techniques and implementation challenges.
Exploiting USB-IP in Linux
Explore USB/IP vulnerabilities in Linux, including buffer overflow and data injection. Learn about architecture, protocol, and security implications of this USB device sharing framework.
Conclusions & Key Takeaways from Black Hat Asia 2017
Explore key cybersecurity insights from Black Hat Asia 2017, covering topics like attacker specialization, machine learning, digital nations, and biometrics.
Bypassing Clang's SafeStack for Fun and Profit
Explore SafeStack's vulnerabilities and potential bypasses in Clang compiler, analyzing implementation weaknesses and demonstrating practical exploitation techniques for memory corruption.
Anti-Plugin - Don't Let Your App Play as an Android Plugin
Explore Android plugin technology's security risks and learn defensive strategies to protect your app from unauthorized loading and execution as a plugin.
Cross the Wall - Bypass All Modern Mitigations of Microsoft Edge
Explore techniques to bypass ASLR, DEP, and CFG exploit mitigations in Microsoft Edge on Windows 10, even with arbitrary address read/write capabilities.
Daily-Life Peeper - Bug Hunting and Exploit Techniques in IoT
Explore IoT security vulnerabilities, bug hunting techniques, and exploit methods. Learn to identify and address risks in everyday connected devices for improved cybersecurity.
Cyber Judo - Offensive Cyber Defense
Learn offensive techniques to enhance your organization's cyber defense against advanced, targeted attacks from security experts Itai Grady and Tal Be'ery.
What's on the Wireless - Automating RF Signal Identification
Explore automated RF signal identification techniques for monitoring diverse wireless technologies in organizational environments, enhancing security and management capabilities.
Evilsploit - A Universal Hardware Hacking Toolkit
Innovative method for hardware hacking using connection matrix, enabling arbitrary analog-alike connections and versatile bus interfacing for comprehensive hardware exploitation.