Writing Bare-Metal ARM Shellcode
Learn to write ARM shellcode for IoT devices, covering ARM architecture, system calls, and techniques for creating compact, reliable payloads. Includes hands-on labs and a demo of exploiting an ARM-based IoT device.
Hacking Yachts Remotely - IoT Hacking At Sea
Explore vulnerabilities in yacht IoT systems and learn techniques for remote hacking of maritime vessels, uncovering potential security risks at sea.
Hacking BLE Bicycle Locks for Fun and - A Small - Profit
Explore BLE bicycle lock hacking in ride-sharing economy. Learn to analyze mobile-lock communications, simplify BLE attacks using mobile phones and Frida, and break locks for free rides.
Real World Attacks Against Secure Elements
Demonstration of real-world attack against globally deployed Secure Element, allowing adversary impersonation of secured devices. Explores vulnerabilities in scaling secure elements for global deployments.
Attacking IoT Speakers
Exploring vulnerabilities in IoT speakers, focusing on Sonos and Bose systems. Covers configuration flaws, diagnostic tools, API issues, and device location. Discusses broader implications for IoT security.
The Secret Codes Tell the Secrets
Exploración de códigos secretos en dispositivos Android, revelando vulnerabilidades de seguridad y métodos de bypass en teléfonos de principales fabricantes. Incluye demostraciones prácticas y herramientas de fuzzing.
Pwning Centrally-Controlled Smart Homes
Exploring vulnerabilities in centrally-controlled smart homes, demonstrating remote attacks on IoT devices like door locks, gates, and gas valves, and discussing analytical methods for smart home hacking.
Hunting for Backdoors in IoT Firmware at Unprecedented Scale
Explore advanced techniques for detecting hidden vulnerabilities in IoT firmware at scale, enhancing cybersecurity practices for the rapidly expanding Internet of Things ecosystem.
IoT - A Security Hole Without A Patch
Explores IoT security challenges, highlighting vulnerabilities, real-world attacks, and industry changes needed for secure IoT implementation and usage.
CANsee - An Automobile Intrusion Detection System
Introducing CANsee: A machine learning-based intrusion detection system for automobiles. Detects abnormal CANBUS traffic using a low-cost device to capture and transmit data wirelessly. Open-source project with potential for enhancing vehicle security.
Random Walk Through A Few Million Things
Explore IoT security challenges in enterprises, examining millions of devices to reveal vulnerabilities, default credentials, and outdated firmware. Gain insights into the current state of IoT security.
Hack In The Studio - Fireside Chat
Fireside chat with security experts Cristofaro Mune and Adam Laurie, discussing their extensive experience in hardware hacking, embedded systems security, and reverse engineering techniques.
ARM IoT Firmware Extraction and Emulation Using ARMX
Hands-on workshop on extracting and emulating ARM IoT firmware using ARMX. Covers firmware extraction, unpacking, file system analysis, and device emulation. Practical experience with real IoT devices and tools.
EXPLIoT Framework - An Introduction to IoT Security Testing
Explore IoT security with EXPLIoT framework. Learn key concepts, tools, and protocols for penetration testing and exploit development in IoT environments. Hands-on workshop for security researchers and pentesters.
Hack Out of the Box - Discovering 10+ Vulnerabilities in VirtualBox
Discover 10+ VirtualBox vulnerabilities through custom fuzzing techniques. Learn about attack surfaces, exploit primitives, and see a live box escape demonstration.
IoTCandyJar - Towards an Intelligent-Interaction Honeypot for IoT Devices
Explore innovative honeypot adaptation for IoT security, addressing unique challenges and proposing intelligent interaction solutions to enhance protection of networked embedded devices.
Moving from Hacking IoT Gadgets to Breaking into One of Europe's Highest Hotel Suites
Explore tools and methods for hacking BTLE-based mobile phone key systems in hotels, from proof of concept to real-world application. Learn about vulnerabilities in IoT security and their practical implications.
OEM Finder - Hunting Vulnerable OEM IoT Devices at Scale
Discover a tool for identifying vulnerable OEM IoT devices across thousands of images, revealing security risks in both supplier and vendor firmware distributions.
Hackers in the Wire and Drones Oh My!
Explore powerful, inexpensive penetration testing using ARM-based devices, from wired/wireless dropboxes to flying drones. Control actions remotely, with devices like BeagleBone Black and Raspberry Pi 2.
Code of Practice for Security in Consumer IoT Products and Services
Explore the UK's Code of Practice for IoT security, addressing password issues, vulnerability disclosure, and software updates. Learn about future challenges and potential certification methods.
Make ARM Shellcode Great Again
Explore advanced ARM shellcode techniques, including overcoming cache coherency, polymorphic shellcode, egg-hunting, and polyglot shellcode. Demonstrations on IoT devices featuring different ARM architectures.