IPC - The Broken Dream of Inherent Security
Explore vulnerabilities in inter-process communication (IPC) systems, including network sockets, Windows named pipes, and USB devices. Learn about potential attacks and mitigation strategies.
Disabling Encryption to Access Confidential Data
Explore techniques for disabling encryption to access confidential data, including man-in-the-middle attacks, AWS vulnerabilities, and TLS exploits. Learn practical methods and necessary tools for intercepting encrypted communications.
Windows Phone App Security for Builders and Breakers
Explore Windows Phone app security for developers and testers, covering encryption, secure data handling, and protection against common vulnerabilities and attacks.
Mantra OS - Because the World is Cruel
Explore Mantra OS's penetration testing tools for web application security, including DDoS, SQL injection, and man-in-the-middle attacks. Learn practical methodologies and risk mitigation strategies.
WiFi Exploitation - How Passive Interception Leads to Active Exploitation
Explore WiFi exploitation techniques, from passive interception to active attacks. Learn about device profiling, rogue access points, and MitM attacks. Includes demonstration of a new sensor framework for visualizing 802.11 data.
SAP BusinessObjects Attacks
Explore SAP BusinessObjects vulnerabilities, architecture, and attack vectors. Learn about security recommendations and potential issues through demonstrations and in-depth analysis.
Patch Me If You Can
Learn about man-in-the-middle attacks, software package integrity, and TLS handshakes. Explore proof of concept, security issues, and practical demonstrations.
Biting into the Forbidden Fruit
Exploring JavaScript cryptography's vulnerabilities, debunking myths, and analyzing real-world implementations to provide an updated perspective on its security challenges and potential solutions.
Uncovering SAP Vulnerabilities - Dissecting and Breaking the Diag Protocol
Dissecting SAP Diag protocol to uncover vulnerabilities, explore attack vectors, and enhance security in SAP Netweaver systems through novel tools and techniques for protocol analysis and exploitation.
Security Vulnerabilities in DVB-C Networks - Rahul Sasi - Ekoparty Security Conference - 2014
Explore security vulnerabilities in DVB-C networks, including middleware server attacks, protocol bugs, and MPEG stream fuzzing. Learn to hijack TV streams and manipulate cable broadcasting systems.
See Like a Bat - Using Echo-Analysis to Detect Man-in-the-Middle Attacks in LANs
Explore Vesper, a novel MitM detector for LANs using echo-analysis. Learn about its application, effectiveness against various attacks, and practical deployment strategies.
New Vulnerabilities in 5G Networks
Explore new vulnerabilities in 5G networks, focusing on operator infrastructure and end-device security. Learn about MC Catcher capabilities, mobile network mapping, and potential risks for cellular and IoT devices.
CQTools - The New Ultimate Hacking Toolkit
Explore top 39 hacking tools in CQTools, including 5 new ones for privilege elevation and network attacks. Learn techniques for hash extraction, impersonation, and decryption.
VLAN Hopping, ARP Poisoning, and Man In The Middle Attacks in Virtualized Environments
Explore VLAN hopping, ARP poisoning, and man-in-the-middle attacks in virtual environments. Learn about test scenarios, hardware specs, and mitigation techniques for network security professionals.
Exploiting Windows Automatic Wireless Association
Exploiting Windows automatic wireless association with "Lure10" technique. Demonstrates man-in-the-middle attack using Wifiphisher tool. Discusses WiFi security, countermeasures, and protection strategies across operating systems.
4G LTE Man in the Middle Attacks With a Hacked Femtocell
Explore 4G LTE vulnerabilities through femtocell hacking, including rooting techniques, portability modifications, and man-in-the-middle attacks. Learn to exploit small cell access networks for security research.
Disappeared Coins - Steal Hashrate in Stratum Secretly
Unveils two novel man-in-the-middle attack schemes on Stratum, the main communication protocol for cryptocurrency mining pools, potentially compromising miners' computing power.
SSL Validation Checking vs. Going to Fail
Explore SSL certificate validation vulnerabilities in mobile apps using SVF tool. Learn about testing methods, real-world results, and implications for app security.
Breaking FIDO - Are Exploits in There?
Explore FIDO authentication's vulnerabilities, potential exploits, and protective measures for enterprises in this comprehensive analysis of the protocol's security landscape.
CANSPY - A Platform for Auditing CAN Devices
Explore CANSPY, a platform for auditing CAN devices in vehicles. Learn to intercept, modify, and analyze CAN frames for security testing of automotive systems and connected devices.
Discovering and Exploiting Novel Security Vulnerabilities in Apple ZeroConf
Uncovers critical security flaws in Apple's ZeroConf frameworks, demonstrating vulnerabilities in Multipeer Connectivity, Bonjour, and services like AirDrop, allowing impersonation and man-in-the-middle attacks.