Passive Bluetooth Monitoring in Scapy
Explore passive Bluetooth monitoring in Scapy using Python extensions and Ubertooth dongle, enabling interactive observation and development of Bluetooth auditing and pentesting tools.
Owning Bad Guys and Mafia with Javascript Botnets
Explore mitm attacks on anonymous services and learn to create JavaScript botnets for analyzing connections, uncovering activities of malicious actors behind these services.
Economics, Physics, Psychology & Relation to Technical Aspects of Counter Intelligence
Explore economic, physical, and psychological aspects of counter-intelligence, examining authentication protocols, learned helplessness, and interactive risk in cybersecurity.
Flowers for Automated Malware Analysis
Explore advanced malware obfuscation techniques that bind execution to specific host environments, making automated analysis ineffective. Learn about the arms race between malware authors and security practitioners.
Appliance Firewalls - A Detailed Review
Comprehensive review of network firewall appliances, examining features, vendor claims, and real-world test results of nearly two dozen devices. Uncovers truths behind marketing promises.
Putting Intrusion Detection into Intrusion Detection Systems
Explore advanced intrusion detection techniques, focusing on proactive strategies and internal network monitoring to enhance cybersecurity beyond traditional perimeter defenses.
Security Issues with Implementing and Deploying the LDAP Directory System
Explore LDAP security vulnerabilities, common deployment errors, and intruder techniques. Learn to safeguard authentication services and protect sensitive data in directory systems.
Huawei - From China with Love
Exploring vulnerabilities in 3G/4G USB modems, focusing on Huawei devices. Discusses potential for widespread infection and botnet creation through software exploits.
Practical Exploitation Using A Malicious Service Set Identifier - SSID
Explore SSID exploitation techniques for wireless device attacks, including XSS, CSRF, and command injection. Learn about limitations, risk factors, and see live demonstrations of these methods.
Off Grid Communications with Android - Meshing the Mobile World
Explore Android mesh networking for resilient, infrastructure-free communication. Learn to implement off-grid concepts, secure networks, and overcome hardware limitations in smartphone ad-hoc networking.
Hybrid Defense - How to Protect Yourself From Polymorphic 0-days
Hybrid approach for early detection of unknown 0-day exploits at network level, combining shellcode detection algorithms to optimize classification, reduce false positives, and increase throughput.
SSL Future Authenticity
Exploring SSL's history, current authenticity issues, recent infrastructure attacks, and potential solutions, with a focus on fixing trust relationships in this fundamental protocol.
Harnessing GPUs - Building Better Browser Based Botnets
Explore browser-based botnets using GPUs for powerful computations. Learn about XSS, HTML5, and WebGL techniques to create efficient, cross-platform botnets capable of breaking strong encryption and impacting cybersecurity.
Phase II - 2nd Generation Honeynet Technologies
Explore cutting-edge advancements in honeypot technologies for enhanced cybersecurity. Learn about innovative techniques to detect and analyze network intrusions from industry experts.
Pass the Hash 2 - The Admin's Revenge
Explore advanced strategies to detect and prevent Pass-The-Hash attacks in Windows networks, addressing vulnerabilities and enhancing enterprise security against lateral movement.
Pass the Hash and Other Credential Theft - Reuse - Mitigating Risk
Explore Pass the Hash attacks and Microsoft's recommended mitigations, including credential theft prevention, authentication policies, and platform changes for enhanced cybersecurity.
Security Issues Affecting Internet Transit Points and Backbone Providers
Explore security vulnerabilities in Internet infrastructure, focusing on BGP4 protocol issues, IP spoofing, and routing attacks. Learn about potential threats to network integrity and financial implications for publicly traded companies.
Phreaking and PBX Tricks
Explore advanced techniques in phone system manipulation and PBX exploitation, uncovering vulnerabilities and learning ethical hacking methods for telecommunications security.
Burglar Alarms and Booby Traps
Discover innovative network defense strategies using insider knowledge. Learn fun tricks to build effective intrusion detection systems for networks, websites, and firewalls.
Over the Router, Through the Firewall, to Grandma's House We Go
Cross-platform hack demonstration showcasing network penetration techniques, traversing routers and firewalls to access sensitive corporate data using multiple hosts and visual aids.
Towards a Taxonomy of Network Security Testing Techniques
Explore network security testing techniques, their effectiveness, and limitations. Gain insights into security scanners' functionality and potential misleading results.