Getting Clear Text Passwords From An IdP & More
Explore privilege escalation in Okta, including methods to obtain clear text passwords and impersonate super-admins. Learn about knowledge graphs for trust analysis in vulnerability discovery and research collaboration.
The Rise of Potatoes - Privilege Escalation in Windows Services
Exploring advanced privilege escalation techniques in Windows services, including a new 0day NTLM relay attack. Covers recent methods, Windows Service Hardening, and the RemotePotato0 attack vector.
Scavenger - Misuse Error Handling Leading to Qemu - KVM Escape
Explore how mishandled error codes in hypervisors can lead to security vulnerabilities, including guest-to-host escape exploits in Qemu/KVM environments.
The Rise of Potatoes - Privilege Escalations in Windows Services
Explore recent privilege escalation techniques in Windows services, focusing on methods attackers use to gain full system control from lower-privileged access.
Inside Out - The Cloud Has Never Been So Close
Explore a novel graph-based approach to cloud infrastructure attacks, revealing vulnerabilities in resource relationships and demonstrating potential privilege escalation techniques.
The Insider - Users
Explore insider threats and vulnerabilities in network domains, revealing how standard users can potentially gain full admin access and compromise security within organizations.
Extreme Privilege Escalation on Windows 8 - UEFI Systems
Explore extreme privilege escalation techniques on Windows 8/UEFI systems, uncovering vulnerabilities in firmware interfaces and demonstrating exploitation methods for elevated system access.
How to Leak a 100-Million-Node Social Graph in Just One Week
Exploración de vulnerabilidades en OAuth 2.0 para redes sociales, demostrando cómo la suplantación de aplicaciones puede llevar a la filtración masiva de datos de usuarios y gráficos sociales.
BlackBerryOS 10 from a Security Perspective
Comprehensive analysis of BlackBerryOS 10's security architecture, exploring attack surfaces, privilege escalation, remote entry points, rootkit persistence, and the effectiveness of BlackBerry Balance.
Windows Phone 7 Internals and Exploitability
Comprehensive analysis of Windows Phone 7 security, revealing hidden internals through reverse engineering. Explores potential vulnerabilities and exploitation techniques in the OS and vendor customizations.
Press ROOT to Continue - Detecting OSX and Windows Bootkits with RDFU
Explore UEFI rootkit detection with RDFU framework. Learn about OSX bootkit functionality, including password sniffing and privilege escalation. Discover tools to combat emerging UEFI-based threats.
SQL Security Revisited
Explore SQL Server security, from authentication modes to vulnerabilities. Learn about target acquisition, privilege escalation, and SQL injection techniques for better defense strategies.
MS SQL Server Security Overview
Comprehensive overview of MS SQL Server security, covering authentication modes, vulnerabilities, discovery techniques, privilege escalation, and best practices for securing databases and preventing SQL injection attacks.
Falling Dominoes
Explore Windows security vulnerabilities and attack techniques in this comprehensive Black Hat presentation, focusing on exploiting system weaknesses and understanding potential threats.
Falling Dominoes Pt. 2
Explore advanced Windows security vulnerabilities and exploitation techniques in this in-depth technical presentation from Trust Factory at Black Hat.
A Stitch in Time Saves Nine - A Case of Multiple Operating System Vulnerability
Explore CPU vulnerabilities and their exploitation across multiple operating systems. Learn about the "sysret" instruction flaw, its impact, and mitigation strategies for system security.
Taranis
Explore Windows security vulnerabilities and advanced exploitation techniques in this in-depth presentation on the Taranis attack framework.
They'll Never See It Coming!
Explore advanced Windows exploitation techniques and stealthy attack strategies to enhance your cybersecurity skills and stay ahead of potential threats.
Windows Attacks At Is The New Black - Rob Fuller And Chris Gates
Explore Windows privilege escalation techniques, from local exploits to password manipulation, with insights on persistence methods and system vulnerabilities.
Information Security in University Campus and Open Environments
Explore campus information security challenges, attack vectors, and mitigation strategies. Learn about privilege escalation, password vulnerabilities, and best practices for protecting university networks.
Gray Hat PowerShell
Explore advanced PowerShell techniques for ethical hacking and security testing, focusing on leveraging built-in Windows tools for penetration testing and system analysis.