Abusing Software Defined Networks
Explore vulnerabilities in Software Defined Networks, including clear-text protocols, weak authentication, and open APIs. Learn to identify, exploit, and protect against these weaknesses in leading SDN platforms.
Industrial Control Systems - Pentesting PLCs 101
Hands-on workshop exploring penetration testing techniques for industrial control systems, focusing on PLCs. Learn to identify vulnerabilities and attack Siemens and Schneider devices.
LTE & IMSI Catcher Myths
Explore LTE security vulnerabilities and IMSI catcher techniques. Learn how popular phones can be exploited on 4G networks, with live demonstrations and in-depth analysis of baseband software weaknesses.
Lessons From Defending The Indefensible
Optimizing infrastructure to defend against DDoS attacks: techniques, experiences, and lessons learned from protecting HTTP/S and DNS services at scale.
Watching the Watchdog - Protecting Kerberos Authentication With Network Monitoring
Explore advanced Kerberos attack detection techniques and learn to protect Windows networks using network monitoring. Includes a novel "Diamond PAC" attack variant and the "Kerberos Leash" tool.
Rapid Radio Reversing
Explore wireless security research techniques combining SDR and non-SDR tools. Learn efficient reverse engineering processes for analyzing and decoding radio signals in this hands-on demonstration.
PLC-Blaster - A Worm Living Solely in the PLC
Demonstration of a self-contained PLC worm targeting Siemens S7-1200 PLCs, showcasing network scanning, self-propagation, and remote control capabilities while evading detection.
AirBnBeware - Short Term Rentals Long Term Pwnage
Explore network security risks in short-term rentals, including attacks and defenses for both renters and property owners. Learn practical countermeasures to protect against potential threats in the sharing economy.
HEIST - HTTP Encrypted Information can be Stolen Through TCP-Windows
Unveils HEIST, a browser-based attack exploiting SSL/TLS vulnerabilities without network access. Demonstrates how to leak cross-origin response sizes, enabling compression-based attacks and sensitive information extraction from popular websites.
Breaking FIDO - Are Exploits in There?
Explore FIDO authentication's vulnerabilities, potential exploits, and protective measures for enterprises in this comprehensive analysis of the protocol's security landscape.
Attacking BYOD Enterprise Mobile Security Solutions
Exposé des failles de sécurité des solutions BYOD et EMS, avec démonstration d'attaques et présentation d'un nouvel outil, Swizzler, pour contourner les protections sur appareils jailbreakés ou non.
Attacking SDN Infrastructure - Are We Ready for the Next-Gen Networking?
Exploring SDN vulnerabilities through attacks on control plane, channel, and data plane. Demonstrates critical exploits affecting network availability and confidentiality, and introduces SDN security projects.
Pay No Attention to That Hacker Behind the Curtain - A Look Inside the Black Hat Network
Insider look at the notorious Black Hat network, revealing infrastructure, traffic patterns, and security challenges faced by one of the most hostile networks on the planet.
Hacking the Wireless World with Software Defined Radio 2.0
Explore diverse wireless systems using software-defined radio. Learn to analyze, reverse engineer, and exploit RF signals for applications ranging from space probes to aircraft tracking and RFID systems.
MLD Considered Harmful - Breaking Another IPv6 Subprotocol
Explores security vulnerabilities in IPv6's Multicast Listener Discovery protocol, demonstrating potential exploits and proposing mitigation techniques for safer IPv6 network implementation.
Relaying EMV Contactless Transactions Using Off-The-Shelf Android Devices
Unveils vulnerabilities in EMV Contactless payments, demonstrating relay attacks using common Android devices. Explores implications for transaction security and public acceptance of contactless payments.
Understanding and Managing Entropy Usage
Explore cryptographic entropy usage, sources, and management across systems. Learn to analyze and improve random number generation for enhanced security in modern IT infrastructures.
Staying Persistent in Software Defined Networks
Explore vulnerabilities in software-defined networks, focusing on ONIE and network operating systems. Learn about potential exploits, malware persistence, and strategies for securing control plane networks.
Defending Your Network with Active Directory Services
Explore advanced network defense strategies using Active Directory Services, focusing on cutting-edge techniques to enhance security and protect against evolving threats.
Getting Rooted and Never Knowing It
Explore advanced hacking techniques and stealthy rootkit deployment methods to understand and defend against sophisticated cyber threats.
Breaking 802.11 WEP
Explore vulnerabilities in 802.11 WEP protocol and learn advanced techniques for breaking wireless network security in this comprehensive cybersecurity presentation.