Decisions and Revisions - The Ever Evolving Face of the Black Hat NOC
Explore the evolution of Black Hat's network operations, including equipment choices, regional adaptations, and cybersecurity insights from global events. Gain insider knowledge on network deployment and attendee behavior trends.
Kr00k - How KRACKing Amazon Echo Exposed a Billion+ Vulnerable Wi-Fi Devices
Discover critical Wi-Fi security vulnerabilities affecting billions of devices, including Amazon Echo. Learn about Kr00k, its impact, and see a live demonstration of the exploit.
Return From The Underworld - The Future Of Red Team Kerberos
Explore Kerberos authentication, its vulnerabilities, and future developments in red team security through practical demonstrations and in-depth analysis.
VLAN Hopping, ARP Poisoning, and Man In The Middle Attacks in Virtualized Environments
Explore VLAN hopping, ARP poisoning, and man-in-the-middle attacks in virtual environments. Learn about test scenarios, hardware specs, and mitigation techniques for network security professionals.
New Ways of IPv6 Scanning
Explore innovative techniques for IPv6 scanning, uncovering vulnerabilities and effective methods to obtain IPv6 addresses despite the vast address space.
APTs Go Teleworking - The Rise of VPN Exploits
Explore the rise of VPN exploits amid increased remote work, focusing on Pulse Secure vulnerabilities, incident response challenges, and threat actor tactics in cyber espionage campaigns.
A New Class of DNS Vulnerabilities Affecting Many DNS-as-Service Platforms
Explore novel DNS vulnerabilities affecting major cloud providers, their impact on corporate networks, and potential information leakage. Learn about root causes, exploitation methods, and mitigation strategies.
Exploiting Windows Automatic Wireless Association
Exploiting Windows automatic wireless association with "Lure10" technique. Demonstrates man-in-the-middle attack using Wifiphisher tool. Discusses WiFi security, countermeasures, and protection strategies across operating systems.
Is This My Domain Controller? A New Class of Active Directory Protocol Injection Attacks
Explore new Active Directory protocol injection attacks, focusing on NTLM and Kerberos vulnerabilities. Learn about attack scenarios, mitigation strategies, and essential tips for defenders.
Circumventing the Guardians - How the Security Features in State-of-the-Art TLS Inspection Solutions Can Be Exploited for Covert Data Exfiltration
Unveiling a stealthy data exfiltration method that bypasses TLS inspection security solutions. Learn about SNIcat and how it circumvents perimeter defenses, with insights on mitigation and detection strategies.
BLEEDINGBIT - Your APs Belong to Us
Explore BLEEDINGBIT vulnerabilities in BLE chips, allowing unauthenticated network penetration. Learn attack methods, packet structures, and prevention strategies for enterprise wireless access points.
SMBv2 - Sharing More Than Just Your Files
Unveils a new attack vector against SMBv2, affecting all IE versions. Demonstrates remote credentials theft and user impersonation from the internet, exploiting bugs for complete user compromise without interaction.
Taxonomic Modeling of Security Threats in Software Defined Networking
Comprehensive analysis of security threats in Software Defined Networking, exploring vulnerabilities, potential attack scenarios, and providing recommendations for effective countermeasures.
Patchwerk - Kernel Patching for Fun and Profit
Explore techniques for patching and securing Linux kernels on IoT devices without source code. Learn to inspect, compile, and apply patches to vendor OEM kernels for vulnerability mitigation and reverse engineering.
How to Make the Internet Faster
Explore network speed beyond bandwidth and latency. Learn about consumer network issues, bufferbloat, and TCP. Discover strategies to improve server and application performance for faster internet experiences.
Zero Trust Networks - Opportunities and Challenges for Red Team
Explore opportunities and challenges for red teams in zero trust networks, examining strategies and techniques for effective security testing and assessment.
IPv6 Insecurity Revolutions
Explore IPv6 security vulnerabilities and auditing techniques with Marc Heuse. Learn about new attack vectors and tools for penetration testing in IPv6 networks.
Why Telcos Keep Getting Hacked
Explore telecom security vulnerabilities, from historical blue-boxing to modern cyberwarfare. Learn about hacking techniques, interception systems, and countermeasures to protect privacy in the face of evolving threats to critical infrastructure.
Giovanni Cruz - Atacando VoIP: un paraíso - Ekoparty 2010
Exploración de vulnerabilidades y técnicas de ataque en sistemas VoIP, revelando riesgos de seguridad y estrategias de protección en comunicaciones de voz sobre IP.
All Your DNS Records Point to Us - Understanding the Security Threats of Dangling DNS Records
Explore security threats of dangling DNS records, understanding vulnerabilities and potential exploits in domain name systems.
When Documents Bite
Explore malicious document attacks, their evolution, and impact on cybersecurity. Learn about real-world techniques and strategies for defending against targeted attacks in enterprise networks.