Automating Password Cracking Rigs with HashCat - Building Resilient Systems
Master automated password cracking infrastructure setup with Ansible and libvirt/QEMU, focusing on system resilience, snapshots, and rollbacks for optimized hashcat operations.
Secure Containers - Do Reduction Strategies Fix Your Nightmares?
Explore container security challenges and reduction strategies to enhance your Docker environment's protection against vulnerabilities and potential threats.
The Perils of Generative AI: Implications for Open Source Intelligence
Explore how Generative AI and Large Language Models impact Open Source Intelligence (OSINT), examining challenges, risks, and strategies for maintaining data integrity in intelligence gathering.
Designing RFID Implants - From Concept to Under-Skin Implementation
Explore the fascinating journey of creating custom RFID implants, from understanding basic concepts to designing functional credentials that work with existing security systems.
An Audacious Plan to Halt the Internet's Enshittification
Explore how internet platforms evolve from user-friendly to exploitative, and discover practical solutions including antitrust measures, privacy laws, and user empowerment tools to combat digital degradation.
Physical Attacks Against Smartphones: Android Security Vulnerabilities and Exploits
Discover physical attack vulnerabilities in Android smartphones, from Recovery mode exploits using SD cards to USB stack weaknesses in secondary bootloaders for achieving root access and code execution.
Revolutionizing ELF Binary Patching with Shiva - Advanced Techniques and Solutions
Discover revolutionary ELF binary patching with Shiva - a JIT system enabling developers to write complex patches in C code, transforming how we maintain and secure legacy software without source code access.
WINE Pairing with Malware - Using Linux Tools for Malware Analysis
Discover how to leverage WINE and Linux tools for malware analysis, extracting forensic evidence, and testing offensive security techniques without expensive sandboxes.
Unlocking Doors Through Long-Range Relay Attacks on Contactless Credentials
Discover how to execute long-range relay attacks on contactless credentials through ISO 14443A protocol vulnerabilities, including live demonstrations and practical mitigation strategies.
Spooky Authentication at a Distance - Post-exploitation Techniques for Windows Environments
Discover innovative post-exploitation techniques for proxying Windows authentication protocols remotely, enabling user impersonation and domain control without elevated privileges.
The Coming War on Encryption - Part 3
Explore current legislative threats to encryption, focusing on Senate proposals, FBI initiatives, and global efforts to undermine secure messaging under the pretext of fighting exploitation.
Backdoor in the Core - Altering Intel x86 Instruction Set at Runtime
Dive into groundbreaking research on Intel CPU microcode manipulation, exploring techniques for persistent modifications and potential security implications through microcode backdoors in x86 instruction sets.
Breaking into Secure Facilities with OSDP - Vulnerabilities and Exploitation Techniques
Uncover critical vulnerabilities in OSDP security protocols and learn practical exploitation techniques for bypassing encrypted RFID systems through demonstrated pentesting tools and methodologies.
Contextualizing The Vulkan Leaks and State-Sponsored Offensive Operations
Explore the implications of the Vulkan files leak, examining Russian cyber capabilities and their connection to global state-sponsored network warfare programs and automated exploitation systems.
What Is a GRC Hacker - Understanding Governance, Risk, and Compliance Security
Discover the role and mindset of GRC (Governance, Risk, and Compliance) hackers in cybersecurity through expert insights and practical perspectives from DEF CON 31.
Bug Hunting in VMware Device Virtualization - Security Vulnerabilities and Attack Surfaces
Delve into VMware device virtualization security, exploring USB system vulnerabilities, SCSI device emulation, and VMKernel design flaws through real-world bug hunting experiences and discoveries.
Unsaflok - Hacking Millions of Hotel Locks and Electronic Access Control Systems
Discover critical vulnerabilities in dormakaba Saflok hotel locks, including key card forgery techniques, security implications, and how to verify if your room's lock has been patched for protection.
Open Sesame - Vulnerabilities in Electronic Smart Lockers and Cabinets
Explore physical and side-channel vulnerabilities in electronic smart locks, focusing on PIN and RFID security risks in organizational locker systems and shared spaces.
Windows Downdate: Downgrade Attacks Using Windows Updates
Discover how to exploit Windows Update vulnerabilities to craft downgrade attacks, bypass security features, and compromise system integrity - from kernel to virtualization stack.
MaLDAPtive: LDAP Query Obfuscation and De-Obfuscation Techniques
Dive into advanced LDAP query obfuscation techniques and defense strategies, exploring a comprehensive framework for detecting and preventing directory services attacks through custom tokenization and parsing.
Oniro - Revolutionizing IoT Markets Through Open Source
Discover how Oniro's open-source ecosystem enables seamless IoT device integration, revolutionizing smart appliance connectivity and creating new possibilities for vendor-neutral, royalty-free development.