Don't Stand So Close To Me - An Analysis of the NFC Attack Surface
Explora la seguridad de NFC en dispositivos móviles, analizando protocolos, vulnerabilidades y posibles ataques. Incluye demostraciones prácticas de explotación y recomendaciones para mejorar la protección.
Let's Play - Applanting
Discover a new attack methodology called APPLANTING, which allows attackers to install apps on Android devices without user knowledge, combining CSRF and clickjacking techniques.
Next Generation Mobile Rootkits
Explore advanced mobile rootkit techniques using ARM TrustZone, including implementation, hiding methods, and lessons learned from creating an actual rootkit.
BlackBerryOS 10 from a Security Perspective
Comprehensive analysis of BlackBerryOS 10's security architecture, exploring attack surfaces, privilege escalation, remote entry points, rootkit persistence, and the effectiveness of BlackBerry Balance.
Mobile Malware - Why the Traditional AV Paradigm Is Doomed
Explore mobile malware threats, limitations of traditional antivirus methods, and innovative approaches like cloud-based screening and hardware-supported security solutions for protecting mobile devices.
Windows Phone 7 Internals and Exploitability
Comprehensive analysis of Windows Phone 7 security, revealing hidden internals through reverse engineering. Explores potential vulnerabilities and exploitation techniques in the OS and vendor customizations.
Cellular Exploitation on a Global Scale - The Rise and Fall of the Control Protocol
Explore hidden cellular device controls, their vulnerabilities, and potential for global exploitation. Learn reverse engineering techniques, protocol analysis, and proof-of-concept exploits for major platforms and networks.
UI Redressing Attacks on Android Devices Revisited
Explore UI redressing attacks on Android devices, examining vulnerabilities and potential security risks in mobile applications.
Injecting Malware into iOS Devices via Malicious Chargers
Demonstration of iOS device vulnerability through malicious chargers, bypassing security mechanisms to inject arbitrary software within one minute of connection, using a proof-of-concept called Mactans.
How to Build a SpyPhone
Explore Android SpyPhone creation, including live demos of phone tracking, call/SMS interception, data extraction, and covert camera/mic activation. Learn injection techniques for any Android app.
Multiplexed Wired Attack Surfaces
Explore techniques for accessing mobile device interfaces through multiplexed wired connections, including gaining shell access and using open-source tools for interface exploration.
I Can Hear You Now - Traffic Interception & Remote Mobile Phone Cloning
Explore femtocell vulnerabilities in cellular networks, demonstrating traffic interception, active attacks, and remote mobile device cloning without physical access.
Pocket PC Abuse
Explore Pocket PC vulnerabilities and security risks in this comprehensive examination of mobile device exploitation techniques.
Behind the Scenes - How Criminal Enterprises Pre-infect Millions of Mobile Devices
Uncover how criminal enterprises infiltrate mobile device supply chains to pre-infect phones with malware, exploring the risks and implications for users and businesses.
Make KSMA Great Again - The Art of Rooting Android Devices by GPU MMU Features
Explores advanced Android rooting techniques using GPU MMU features, overcoming hardware and software mitigations in Android 13 devices through innovative exploitation methods.
The Living Dead - Hacking Mobile Face Recognition SDKs with Non-Deepfake Attacks
Explore vulnerabilities in mobile face recognition systems, focusing on non-deepfake attacks that bypass liveness detection. Learn about security flaws in popular SDKs and their implications for critical applications.
A Security Research Journey - How the Mobile Industry Met Hackers in the Middle
Explore the mobile industry's collaboration with hackers to enhance security, from informal relationships to a cross-industry vulnerability disclosure scheme, featuring key hacks and future challenges.
Over the Air, Under the Radar - Attacking and Securing the Pixel Modem
Explore Android Red Team's proactive security approach for Google Pixel devices, focusing on modem vulnerabilities and protection strategies against remote compromises.
Log - It’s Big, It’s Heavy, It’s Filled with Personal Data! Measuring the Logging of Sensitive Information in the Android Ecosystem
Explores Android's logging system, revealing how sensitive user data is inadvertently exposed through system logs and preinstalled apps, raising privacy concerns in the mobile ecosystem.
How to Hack Shannon Baseband
Explore remote baseband vulnerabilities in Samsung modems, including attack surface analysis, bug discovery, testing methods, and potential exploitation techniques for mobile network security.
When Did the Smartphone Pentest Framework Get Awesome
Explore the evolution and capabilities of the Smartphone Pentest Framework with cybersecurity expert Georgia Weidman, highlighting key advancements in mobile device security testing.