Introducing Wifiphisher - A Tool for Automated WiFi Phishing Attacks
Explore automated WiFi phishing attacks using wifiphisher, an open-source tool. Learn about Evil Twin and Karma attacks, phishing scenarios, and countermeasures to protect against these threats.
Proprietary Network Protocols - Risky Business on the Wire
Explore reverse engineering of proprietary network protocols, uncovering security flaws in financial software through case studies and practical guidelines for protocol analysis.
DNS Tunnelling - It's All in the Name!
Explore DNS tunneling techniques for data exfiltration and command-and-control, including detection methods and practical demonstrations of this stealthy network attack vector.
Finux's Historical Tour of IDS Evasion, Insertions and Other Oddities
Explore the history and limitations of network intrusion detection systems, examining evasion techniques and inherent problems while critically evaluating vendor claims and industry acceptance.
Easy Ways to Bypass Anti Virus Systems
Discover simple techniques to evade antivirus systems, including signature detection, emulation, sandboxing, and firewalls. Learn how attackers can bypass popular security measures with minimal effort and resources.
Turning Your Weapons Against You
Exploiting security tools: Learn how vulnerability scanners and NAC solutions can be manipulated, common misconfigurations, and methods to capture enterprise credentials. Includes demos and remediation strategies.
Using Network Miner to Reconstruct Network Traffic
Learn to extract and reconstruct network traffic data using NetworkMiner, enhancing your understanding of internet data transmission and streamlining the process of bulk resource extraction from packet captures.
Profiling the Attacker - Using Offender Profiling in SOC Environments
Explore offender profiling techniques for SOC environments, including asset classification, attack analysis, motive discernment, and actor profiling to enhance network security and threat intelligence.
Android RATs Detection With a Machine Learning-Based Python IDS
Explore Android RATs detection using machine learning and Python IDS. Learn about dataset creation, Slips IDS implementation, and live demo of RAT activity detection in mobile device network traffic.
NFC Payments - The Art of Relay and Replay Attacks
Explore NFC payment vulnerabilities, including relay and replay attacks. Learn about hardware, software, and techniques used to exploit NFC transactions and tokenization processes.
Real World Attacks Against Secure Elements
Demonstration of real-world attack against globally deployed Secure Element, allowing adversary impersonation of secured devices. Explores vulnerabilities in scaling secure elements for global deployments.
Trust No One
Exploring ATM security vulnerabilities, including network attacks, black box attacks, and communication vulnerabilities. Provides insights on protecting ATMs from evolving threats beyond traditional malware.
Ridiculous Radios
Explore four unconventional, home-built software-defined radios using simple methods and common parts. Learn innovative approaches to wireless experimentation and protocol hacking from a leading security researcher.
SeasCoASA - Exploiting A Small Leak In A Great Ship
Exploiting vulnerabilities in Cisco ASA firewalls: New techniques to bypass protection mechanisms, heap exploitation strategies, and disclosure of a 0-day vulnerability affecting major ASA versions.
Attacking Encrypted VOIP Protocols
Explore techniques for intercepting and decrypting encrypted SIP sessions, and learn about a new tool for streamlined password recovery in VOIP protocols.
Hiding a Secret Distributed Chat System in 802.11 Management Frames
Explore a covert distributed chat system using 802.11 management frames, featuring AES encryption, extended network coverage, and data exfiltration capabilities for secure communications.
Secure and Scalable Anomaly-Based Network Intrusion Detection
Presentation on a secure, scalable framework for anomaly-based network intrusion detection, implemented in Go. Explores feature extraction, data collection, and machine learning applications for detecting network threats.
IPv6 Insecurity Revolutions
Explore IPv6 security vulnerabilities and auditing techniques with Marc Heuse. Learn about new attack vectors and tools for penetration testing in IPv6 networks.
Exploiting the Netlogon Protocol
Discover a critical Windows vulnerability allowing privileged remote code execution through Netlogon protocol exploitation. Learn about attack details, prior work, and custom cryptographic schemes used for authentication.
RedPhishing - Wi-Fi, Phishing and Red Teaming
Explore new techniques for attacking corporate WiFi networks during physical red teaming engagements, including evil twin attacks and exploiting OS trust in certificates. Learn about risks and protective measures.
IoT - A Security Hole Without A Patch
Explores IoT security challenges, highlighting vulnerabilities, real-world attacks, and industry changes needed for secure IoT implementation and usage.