Cats in My Certificate Transparency Logs
Explore Certificate Transparency logs: their purpose, functionality, and potential misuse. Learn about SCTs, public keys, and novel applications, including finding cat pictures online.
Vendor Security - Where Our Data Goes We Follow
Explore vendor security challenges and solutions with experts from diverse companies. Learn about assessment methods, influencing vendors, scaling programs, and predicting security maturity in partner organizations.
Bootstrapping Security
Practical strategies for implementing effective cybersecurity on limited budgets, covering tools, techniques, and cost-saving approaches for organizations with financial constraints.
Light and Adaptive Indexing for Immutable Databases
Explore innovative indexing strategies for large-scale immutable databases, including learned and adaptive indexes, addressing engineering challenges in distributed environments.
Near-Realtime Monitoring of Drones at Sea
Explore autonomous ocean data collection using wind and solar-powered drones, addressing challenges in remote monitoring and fleet management for long-duration marine missions.
Systems That Run Forever - Self-Heal and Scale
Explore architectural principles for building scalable, fault-tolerant systems using isolated parallel components, error detection, and live code upgrades, with insights from Erlang's design.
Enso - Composing DSL Interpreters, Languages & Aspects
Explore Enso, a language workbench for creating DSLs with graphical and textual editing. Learn about schema-based language definition, interpreter implementation, and powerful language composition techniques.
ECMO - Rehost Embedded Linux Kernels via Peripheral Transplantation
Innovative technique for rehosting embedded Linux kernels in QEMU using peripheral transplantation, enabling dynamic analysis of firmware images from diverse embedded devices.
Message in a Broken Bottle - Exploring the Linux IPC Attack Surface
Explore Linux's IPC attack surface, focusing on systemd and dbus-daemon. Discover vulnerabilities in system services and learn about potential security risks in Linux's userspace processes.
Is This My Domain Controller? A New Class of Active Directory Protocol Injection Attacks
Explore new Active Directory protocol injection attacks, focusing on NTLM and Kerberos vulnerabilities. Learn about attack scenarios, mitigation strategies, and essential tips for defenders.
Mobius Band - Explore Hyper-V Attack Interface through Vulnerabilities Internals
Explore Hyper-V vulnerabilities and attack interfaces, focusing on 3 RCE vulnerabilities in Microsoft's virtualization solution. Gain insights into cloud security and potential risks.
Finding a Needle in an Encrypted Haystack
Discover new techniques to exploit NTLM authentication, including a critical zero-day vulnerability enabling domain-wide machine takeover, even with strict security configurations.
Where 2 Worlds Collide - Bringing Mimikatz et al to UNIX
Explore techniques for attacking Active Directory forests from UNIX systems integrated with AD, examining tools and procedures that bridge these two worlds in cybersecurity.
Back to the Future - A Radical Insecure Design of KVM on ARM
Explore ARM architecture vulnerabilities in KVM, focusing on privilege escalation through exception-generating instructions and hypervisor calls. Learn about potential security risks in virtualization.
Straight Outta VMware - Modern Exploitation of the SVGA Device for Guest-to-Host Escapes
Explore modern exploitation techniques for VMware Workstation's virtual graphics device, analyzing the graphics pipeline to achieve guest-to-host code execution in this in-depth security presentation.
Hardening Hyper-V through Offensive Security Research
Explore offensive security research techniques to enhance Hyper-V's resilience, focusing on vulnerabilities, mitigations, and Microsoft's virtualization stack security strategies.
Advanced IC Reverse Engineering Techniques - In Depth Analysis Of A Modern Smart Card
Explore advanced IC reverse engineering techniques through in-depth analysis of a modern smart card, focusing on hardware attacks, proprietary algorithms, and efficient analysis methods.
Red Vs. Blue - Modern Active Directory Attacks, Detection, And Protection
Explore advanced Active Directory attack methods, detection techniques for Golden and Silver Tickets, and effective mitigation strategies. Learn to identify and protect against sophisticated network intrusions.
Internet Plumbing for Security Professionals - The State of BGP Security
Explore BGP security, its vulnerabilities, and practical countermeasures to build trust in the Internet's foundation. Learn about routing leaks, hijacking risks, and implementation strategies for a more secure network infrastructure.
How to Find Bugs in USB Device Drivers
Explore USB device driver vulnerabilities using vUSBf framework. Learn about fuzzing techniques, bug detection, and potential security risks in USB implementations across various operating systems.
Abusing Microsoft Kerberos - Sorry You Guys Don't Get It
Explore Kerberos vulnerabilities in Microsoft Active Directory, revealing long-term security risks and challenging assumptions about authentication protocols.