Mallet - Towards a Generic Intercepting Proxy
Explore Mallet, a new open-source intercepting proxy with a user-friendly interface, high performance, and extensive protocol support. Learn its advantages over existing tools and potential applications.
XFLTReaT - A New Dimension In Tunnelling
XFLTReaT: An open-source tunnelling framework for bypassing network restrictions. Simplifies development of custom tunnels, supports various protocols, and offers easy configuration and use for network professionals.
Hadoop Safari - Hunting for Vulnerabilities
Explore Hadoop security vulnerabilities and attack vectors in Big Data environments. Learn practical techniques to access data lakes and exploit weaknesses in cluster infrastructures.
In Depth Analysis of Multicast DNS and DNS Service Discovery
Análisis profundo de los protocolos mDNS y DNS-SD, explorando sus vulnerabilidades inherentes y posibles vectores de ataque en entornos de red de configuración cero.
A Surprise Encounter With a Telco APT
Exposé of a sophisticated telco hack, revealing methodologies, tools, and protocols used by a suspected state actor. Insights from a live session observation and forensic analysis of a mobile network operator intrusion.
Exploiting Windows Automatic Wireless Association
Exploiting Windows automatic wireless association with "Lure10" technique. Demonstrates man-in-the-middle attack using Wifiphisher tool. Discusses WiFi security, countermeasures, and protection strategies across operating systems.
Forging a Wireless Time Signal to Attack NTP Servers
Forging wireless time signals to disrupt NTP servers and consumer devices. Explores vulnerabilities in radio timing services and demonstrates low-cost methods to spoof GPS, WWVB, and other signals used for time synchronization.
4G LTE Man in the Middle Attacks With a Hacked Femtocell
Explore 4G LTE vulnerabilities through femtocell hacking, including rooting techniques, portability modifications, and man-in-the-middle attacks. Learn to exploit small cell access networks for security research.
DFEx - DNS File Exfiltration
Explore DNS file exfiltration techniques, including a unique protocol for bypassing NG Firewalls. Learn about HIPS tricks and innovative approaches to data transfer across networks.
Finding Vulnerabilities in iOS - MacOS Networking Code
Explore iOS/macOS networking vulnerabilities, focusing on mbuf processing in XNU kernel. Learn about network packet structures, vulnerability discovery techniques, and PoC exploit development.
WiCy - Monitoring 802.11AC Networks At Scale
Explore challenges in 802.11ac network monitoring and learn to create a custom monitoring platform using repurposed access point hardware. Gain practical knowledge and scripts for implementation.
Taking Over Telecom Networks
Explore telecom network vulnerabilities, attack vectors, and security best practices in this comprehensive overview of mobile infrastructure risks.
Analysis to Remote Root 0day in a SSL-VPN Appliance
Análisis detallado de vulnerabilidades en un dispositivo SSL-VPN líder, revelando fallas de seguridad y demostrando la explotación para obtener acceso root remoto no autenticado.
LTE Pwnage - Hacking Core Network Elements
Explore LTE network vulnerabilities, legacy protocols, and security challenges in telecom core elements. Learn about DoS attacks, equipment vulnerabilities, and practical approaches to telecom product security lifecycle.
SSRF PWNs - New Techniques and Stories
Découvrez de nouvelles techniques d'attaques SSRF, leurs impacts sur la sécurité des applications web et des exemples concrets d'exploitation, présentés par deux experts en sécurité informatique.
Growing Network Security Specialists for Our Enterprise
Explore enterprise network security strategies, including bug bounty platforms, vulnerability detection, and building expert security teams. Learn from industry leader Xinhua Cai's insights on fostering innovation and collaboration.
Wash Your Hands! This Is Bot Country
Network security challenges in remote work: risks, tools, and strategies for protecting expanded perimeters from IoT vulnerabilities and global threats. Tips for forensics and threat intelligence.
The Evolving Attack Surface
Explore the expanding vulnerabilities in industrial control systems, from traditional security to blockchain, with insights on hardware attacks, supply chain risks, and network hijacking.
The Challenges of Detecting Silent Exits of Your Data
Explore strategies for detecting and preventing data breaches, focusing on silent exits and evolving security mindsets in an interconnected business landscape.
Important Technologies of Kaspersky Endpoint Security Cloud
Explore key technologies in Kaspersky Endpoint Security Cloud for Windows, macOS, and smartphones, including threat protection, encryption, and device control features.
Finding Government and Vendor Hardware Backdoors
Explore techniques for identifying hidden backdoors in government and vendor hardware, covering pentesting, security appliances, and various operating systems.