Hey, Your Parcel Looks Bad - Fuzzing and Exploiting Parcelization Vulnerabilities in Android
Explore Android's Binder IPC vulnerabilities through fuzzing and exploitation techniques. Learn to identify, analyze, and exploit "BadParcel" issues for privilege escalation in high-privilege processes.
Getting Rooted and Never Knowing It
Explore advanced hacking techniques and stealthy rootkit deployment methods to understand and defend against sophisticated cyber threats.
Rotten Potato Privilege Escalation from Service Accounts to SYSTEM
Explore privilege escalation techniques from service accounts to SYSTEM using the 302 Rotten Potato exploit, including background, updates, and a live demonstration.
Bumper Targeted Attacks and the Privileged Pivot
Explore targeted attacks, privilege escalation, and defense strategies in this cybersecurity talk. Learn about traditional defenses, privilege cycles, and practical tools for enhancing system security.
Deconstructing DeFeNeStRaTe.C
Dive into mainframe security with an analysis of DeFeNeStRaTe.C, exploring privilege escalation, APF unix programs, buffer overflows, and ACEE manipulation on IBM z/OS systems.
Logrotten - It's Not a Bug
Sicherheitslücke in Logrotate: Ausnutzung, Auswirkungen und Reichweite. Demonstration der Schwachstelle, Einfluss auf andere Softwarepakete und aktueller Stand von Logrotate werden diskutiert.
Android Custom Permissions Demystified - From Privilege Escalation to Design Shortcomings
Explore Android custom permissions, uncovering potential security vulnerabilities and design flaws while learning best practices for secure app development.
Fried Apples - Jailbreak DIY
Explore iOS jailbreaking techniques, including persistence, patchfinding, and kernel protection bypass. Learn about internal structures and low-level details of modern jailbreaks for Apple devices.
Privilege Escalation Using DOP in MacOS
Explore privilege escalation in MacOS using Data-Oriented Programming (DOP), a powerful exploit technique that leverages heap buffer overflow vulnerabilities for persistent attacks resistant to kernel code changes.
Advanced Attack Vectors in Azure Environments
Explore privilege escalation techniques in Azure's integrated ecosystem. Learn core concepts and advanced attack vectors for enhanced cloud security awareness.
Tooling Up for Kerberos
Explore Kerberos security with custom tools, focusing on local machine vulnerabilities and privilege escalation. Gain insights into complex Kerberos artifacts for enterprise network protection.
Introduction to Red Team Tooling and Opsec
Explore modern red team techniques, tools, and operational security practices for effective penetration testing and cybersecurity assessments.
MacOS Security - Escaping The Sandbox & Bypassing TCC
Explore macOS security measures, including sandboxing and TCC, and learn about potential vulnerabilities and bypass techniques in third-party applications and system components.
Privilege Escalation In Da House
Explore advanced privilege escalation techniques for penetration testing and security assessments, focusing on real-world scenarios and practical applications.
The Art of Exploiting Logical Flaws in Web Applications
Exploring techniques to detect and exploit logical vulnerabilities in web applications, focusing on manual testing methods and real-world examples from bug bounty programs.
Jailbreaks Never Die - Exploiting iOS 13.7
Unveiling iOS 13.7 exploit chain: kernel vulnerabilities, mitigation bypasses, and techniques for reading/writing kernel memory. Insights into iOS security research and jailbreak development.
Walk Through Access Control Systems
Exploring vulnerabilities in biometric access control systems, including server command forgery, unauthorized user addition, and face database exposure. Demonstrates exploits to leak employee data and bypass security measures.
Traversing the Kill-Chain - The New Shiny in 2018
Explore cutting-edge red teaming techniques, OSINT sources, and tools for target discovery and profiling. Learn to navigate advanced EDR systems and adapt tactics for successful penetration in 2018's cybersecurity landscape.
God Mode Unlocked - Hardware Backdoors in x86 CPUs
Unveiling a critical hardware backdoor in x86 CPUs allowing unprivileged users to bypass security checks and escalate to kernel-level access. Explores detection, prevention, and broader implications for processor security.
Rootten Apples - Vulnerability Heaven in the iOS Sandbox
Exploring iOS vulnerabilities beyond containerized apps, revealing multiple privilege escalation flaws affecting all devices and demonstrating a chained exploit to bypass security mitigations.
The Secret Codes Tell the Secrets
Exploración de códigos secretos en dispositivos Android, revelando vulnerabilidades de seguridad y métodos de bypass en teléfonos de principales fabricantes. Incluye demostraciones prácticas y herramientas de fuzzing.