Nothing New About XSS in Impress.js
Demonstrating XSS vulnerabilities in impress.js presentations, showcasing innovative features like a 3D cockpit view and dynamic slide content manipulation for enhanced interactivity and visual appeal.
GPN18 - Frida - Game Hacking mit JavaScript
Entdecke, wie JavaScript mit dem Frida Framework zum Hacken von Spielen und Programmen eingesetzt werden kann. Lerne Techniken wie Speichermanipulation und Hooks kennen.
P2P with JavaScript to Defend Against Bad Lawmaking
Explore secure, private post-Snowden era Internet solutions using P2P JavaScript technology to counter restrictive legislation and protect online freedoms.
Caught My WebApp Cheating on Me
Exploring techniques to detect and prevent client-side injections and tampering in web applications, ensuring integrity and security of code executed in the browser.
Dormant DOMination
Exploring JavaScript-based network scanning techniques to discover attack surfaces across different networks, including air-gapped systems, through dormant browser objects and existing web technologies.
Offensive Javascript Techniques for Red Teamers
Explore advanced JavaScript techniques for network reconnaissance and exploitation, focusing on rapid execution and targeting internal vulnerabilities from external sources.
Hacking JavaScript Desktop Apps with XSS and RCE
Explore techniques for auditing Electron apps, understanding XSS in desktop environments, and exploiting vulnerabilities to achieve remote code execution in JavaScript-based applications.
ToStaticHTML for Everyone - About DOMPurify
Exploring DOM-based XSS sanitation challenges and introducing DOMPurify, a novel solution for secure client-side filtering in modern web applications.
We Have You by the Gadgets
Explore Windows gadget platform vulnerabilities, attack vectors, and the creation of malicious gadgets. Learn about security risks in this embedded application system.
Electronic Arts Success - The Intersection of Mobile, Microservices, Node.js, and DevOps
Explore EA's mobile gaming evolution: Node.js, microservices, and DevOps integration for scalable infrastructure and enhanced customer experiences in a rapidly evolving industry.
OpenShift Advanced Management with Red Hat CloudForms
Explore advanced OpenShift management using CloudForms for enhanced visibility, metrics analysis, chargeback, and security in container environments.
Breaking Smart - Bank Statements
Explore techniques for breaking encrypted bank statements, including JavaScript and RC4 analysis, with practical demonstrations and insights on difficulty levels and methodologies.
Search Engine Deoptimization with Gootloader
Explore search engine deoptimization techniques used by Gootloader malware, including compromised WordPress sites, malicious SEO, and process hollowing. Learn about server infrastructure and potential countermeasures.
Prototype Pollution Attacks in NodeJS Applications
Explore prototype pollution attacks in NodeJS, including APIs vulnerable to pollution, potential impacts, and defensive strategies. Learn from real-world examples and security research findings.
The Chrome Crusader
Explore Chrome extension vulnerabilities, security considerations, and potential exploits. Learn about architecture, headers, and isolation techniques for safer browsing experiences.
Practical Static Analysis for Continuous Application Security
Explore practical static analysis techniques for continuous application security, from simple grep to custom tools, enhancing software development lifecycle with targeted security checks.
Clobbering the Cloud - Part 2
Explore advanced cloud security vulnerabilities, including clickjacking, sharing space issues, and custom language platforms. Learn defensive strategies and future directions in cloud protection.
SIM Simulator - A Security Assessment Tool for Mobile Communications
Explore SIMulator, a security assessment tool for mobile communications. Learn about SIM cloning, custom key injection, and architecture using STM32F103 and Node.js for realistic SIM emulation and MITM attacks.
SyScan360'16 Singapore - Key Value Injections Here
Explore key value injections, their impact on serialization, and implications for React and CouchDB in this technical deep dive.
Unwinnable Prizes on the Internet - Roland Meertens - RC3
Exposé sur les jeux en ligne truqués offrant des prix impossibles à gagner, révélant les techniques trompeuses utilisées pour collecter les adresses e-mail des utilisateurs.
Legislative Engineering - Design Privacy Laws, Don't Just Draft Them - USENIX Enigma Conference - 2017
Exploring software engineering techniques to improve technology legislation, focusing on component-based architecture and modeling to create more effective and consistent laws.