QuickShell: Remote Code Execution Attack Chain Analysis in Quick Share
Uncover critical security vulnerabilities in Google's Quick Share protocol, including an RCE attack chain, HTTPS MITM techniques, and protocol analysis for both Windows and Android platforms.
WPAD Domain Exploitation: Understanding Man-in-the-Middle Attacks Through DNS
Uncover how a single domain purchase can exploit WPAD vulnerabilities, leading to massive-scale man-in-the-middle attacks and compromising hundreds of thousands of internet clients through DNS manipulation.
Protecting Against AitM Phishing at Scale - From Zero to Millions
Dive into advanced strategies for large-scale protection against Adversary-in-the-Middle phishing attacks, exploring implementation techniques and defensive measures for organizational security.
Bypassing Modern Authentication Methods for SSO - A Beginner's Guide
Explore passwordless authentication weaknesses, WebAuthn fundamentals, and attack tactics to bypass authentication. Learn credential theft from federation providers and get mitigation suggestions.
7 Common Cyber Attacks and How to Prevent Them
Explore seven major cyber attack methods and learn effective defense strategies for authentication systems, from credential stuffing to injection attacks and real-world prevention techniques.
Racing for TLS Certificate Validation: A Hijacker's Guide to the Android TLS Galaxy
Explore critical TLS certificate validation vulnerabilities in Android apps, focusing on validation hijacking issues, their impact on security, and the role of third-party libraries in creating these risks.
Black Hat Europe 2023
Black Hat Europe 2023
Black Hat Asia 2025
Black Hat Asia 2025
Black Hat Europe 2024
Black Hat Europe 2024
Black Hat Europe 2022
Black Hat Europe 2022