Playing in a Satellite Environment
Explore satellite communication vulnerabilities and hacking techniques in this Ekoparty 2009 conference talk, focusing on security implications for modern satellite systems.
CTF or WTF?
Compara desafíos CTF con pruebas de penetración reales, explorando similitudes y diferencias en habilidades, escenarios y lecciones aprendidas para profesionales de ciberseguridad.
Hacking K-12 School Software in a Time of Remote Learning
Análisis de vulnerabilidades en software educativo durante la pandemia, explorando ataques potenciales y sus implicaciones para la seguridad de dispositivos escolares y domésticos.
DNS On Fire
Explore DNS-based threats and advanced security techniques with Talos researchers Warren Mercer and Paul Rascagnères. Learn about cutting-edge malware detection and threat intelligence in network security.
Public, Verifiable, and Unbiasable Randomness - Wassat?
Explore randomness types, their importance, and applications. Learn about drand, a distributed randomness software, and its role in providing public, verifiable randomness as a service.
Homeward Bound - Scanning Private IP Space with DNS Rebinding
Explore DNS Rebinding attacks, their resurgence, and tools for network reconnaissance from inside browsers. Learn about a "localhost census" page that enumerates HTTP services on visitors' computers.
Attacking Linux Moose Unraveled an Ego Market
Unraveling a large-scale botnet conducting social media fraud through honeypots and HTTPS man-in-the-middle attacks. Explores technical details, methodology, and market dynamics behind social media fraud.
DDoS - Barbarians at the Gate
Explore tools, methods, and data behind headline-making DDoS attacks, gaining insights into modern cybersecurity threats and defense strategies.
Deanonymization of TOR HTTP Hidden Services
Explore techniques for deanonymizing TOR hidden services, presented by an Application Security Engineer. Gain insights into vulnerabilities and potential risks in anonymous web services.
SolarWinds One Year Later - The Story of an Unauthenticated RCE in the Orion Platform
Explore the aftermath of the SolarWinds breach, focusing on an unauthenticated remote code execution vulnerability in the Orion Platform. Gain insights into cybersecurity implications and lessons learned.
Project TEMPA - Demystifying Tesla Bluetooth Passive Entry System
Demystifying Tesla's Bluetooth Passive Entry system, exploring its security features, potential vulnerabilities, and implications for future automotive technology.
Neurosurgery for Industrial Routers - Security of Sarian OS
Explore vulnerabilities in industrial routers, focusing on Digi WR21 and Sarian OS. Uncover internal workings, network protocols, and security features of critical infrastructure devices.
Reversing and Exploiting Broadcom Bluetooth
Insights into reverse engineering Broadcom Bluetooth firmware, including InternalBlue framework, patching techniques, and discovered vulnerabilities CVE-2018-19860 and CVE-2019-6994.
Badkeys - Finding Weak Cryptographic Keys At Scale
Discover how to detect weak cryptographic keys at scale using the badkeys tool and service. Learn about past vulnerabilities and new findings in TLS certificates and IoT devices.
Careful Who You Trust - Compromising P2P Cameras At Scale
Explore vulnerabilities in P2P protocols used by smart cameras, including Kalay Platform analysis, device-specific exploits, and remote code execution demonstrations. Learn about IoT security risks and mitigation strategies.
DDoS Mitigation
Explore DDoS attack trends, attacker motivations, and defense strategies. Learn effective mitigation practices to protect your organization from disruptive cyber threats.
KRACKing WPA2 Using Key Reinstallation Attacks
Explore the KRACK attack against WPA2, learning how it exploits key reinstallation to compromise Wi-Fi network security. Gain insights into vulnerabilities in protected Wi-Fi handshakes.
Barbarians At The Gateway
Explore DDoS and web attack tools, methods, and data. Gain insights into attacker motivations, progression, and patterns to enhance your cybersecurity awareness and protection strategies.
Building Custom Scans for Real World Enterprise Network
Explore techniques for developing tailored network scans to enhance security in large-scale enterprise environments. Learn practical strategies for identifying vulnerabilities and strengthening defenses.
Let's Screw with Nmap
Explore a new approach to packet normalization that prevents OS fingerprinting by tools like nmap, enhancing network security and privacy for multiple hosts.
Evil Twin Detection
Explore Evil Twin attacks in Wi-Fi networks, their detection methods, and countermeasures. Learn to identify and protect against malicious access points that mimic legitimate ones.