Ghost in the Machine: Challenges in Embedded Binary Security - Enigma 2017
Explores challenges in embedded binary security, highlighting the lag behind general-purpose systems and difficulties in adopting modern exploit mitigations due to constraints in embedded environments.
Hardware-Assisted Fine-Grained Control-Flow Integrity - Adding Lasers to Intel's CET/IBT
Explore advanced control-flow integrity techniques, enhancing Intel's CET/IBT with fine-grained protections for improved software security and memory corruption prevention.
Format String Vulnerabilities 101 - Lecture 4
Explore format string vulnerabilities, their exploitation, and mitigation strategies in this comprehensive introduction to a critical security concept.
Securing C Code That Seems to Work Fine
Explore strategies for securing C codebases in high-performance environments, balancing best practices with startup culture. Learn from real-world successes and failures in implementing application security controls.
The Path Towards Automated Heap Exploitation
Explore automated heap exploitation techniques and strategies for enhancing cybersecurity defenses in this insightful conference talk by Thaís Moreira Hamasaki.
SLUB Internals for Exploit Developers
Explore SLUB allocator internals and slab memory shaping strategies for Linux kernel exploit development. Gain insights into controlling memory corruption and implementing effective exploit techniques.
CIAPO - Code Injection via Arbitrary Pointer Overwrite
Explore code injection via arbitrary pointer overwrite in this cybersecurity presentation. Learn about vulnerabilities, hacking techniques, and defensive strategies from a Bitdefender security researcher.
Blasting Past WebP - Exploring Image Format Vulnerabilities
Explore advanced techniques for bypassing WebP image format security measures, uncovering vulnerabilities and potential exploits in web applications.
Beyond Android MTE: Navigating OEM's Logic Labyrinths
Explore advanced Android security, focusing on Memory Tagging Extension (MTE) and OEM-specific implementations. Gain insights into exploiting vulnerabilities in custom logic.
Unexpected Intrusion Testing Results in SAP Systems - Critical Vulnerabilities and Exploits
Unveiling critical vulnerabilities in SAP Start Service, from local to remote exploits. Explores memory corruption and OS command injection leading to root-level RCE, with live demo and recommendations.
Attacking Windows Device Drivers: Almost Escaping the Sandbox
Explore techniques for attacking Windows device drivers and potential sandbox escape methods in this advanced security analysis presentation.
Practical Exploitation of Registry Vulnerabilities in the Windows Kernel
Explore practical exploitation techniques for Windows kernel registry vulnerabilities, enhancing your understanding of system security and potential attack vectors.
Bug Hunting Using Symbolic Virtual Machines - Hack.lu 2017
Explore symbolic execution for vulnerability discovery and reverse engineering. Learn KLEE symbolic virtual machine basics to solve complex challenges in software security.
Fuzzing at Mach Speed: Uncovering IPC Vulnerabilities on MacOS
Explore macOS IPC security, focusing on Mach message handlers. Learn about custom fuzzing techniques to uncover vulnerabilities in privileged RPC-like functions, potentially leading to sandbox escapes and privilege escalations.
Linux Vulnerabilities, Windows Exploits - Escalating Privileges with WSL
Explore WSL vulnerabilities and Windows kernel exploitation techniques. Learn about reverse engineering, syscall manipulation, and bypassing modern anti-exploitation defenses to achieve privilege escalation.
Hacking Automatically - Applying Program Analysis to IoT
Discover how program analysis can uncover vulnerabilities in IoT devices. Learn about firmware analysis challenges, memory corruption patterns, and see 20 real-world examples of security flaws identified through automated techniques.
JARVIS Never Saw It Coming - Hacking Machine Learning in Speech, Text and Face Recognition
Explore hacking techniques for machine learning systems in speech, text, and facial recognition, including exploits, backdoors, and adversarial attacks. Live demo included.
Select Code Execution From Using SQLite
Exploración de vulnerabilidades en SQLite para lograr ejecución de código remoto mediante técnicas innovadoras como Query Hijacking y Query Oriented Programming, demostrando escenarios de ataque en servidores y iOS.
SyScan360'16 Singapore - Memory Corruption Is For Wussies
Explore advanced OS X exploitation techniques, Mach messaging, and system integrity protection. Learn to bypass security measures and load unsigned kernel extensions.
Binder - The Bridge To Root - Hongli Han and Mingjian Zhou
Exploración detallada de la vulnerabilidad "Waterdrop" en el controlador Binder de Android, que permite escalar privilegios y obtener acceso root en dispositivos populares, incluyendo los Pixel más recientes.
Exploitation of a Modern Smartphone Baseband
Explore smartphone baseband security, learn to find and exploit memory corruption bugs in modern devices. Gain insights into design, countermeasures, and practical hacking techniques.