Reverse Engineering ABAP Malware Analysis
Explore techniques for reverse engineering ABAP code and analyzing malware in SAP systems, enhancing your ability to detect and mitigate security threats.
Unsafe JAX RS - Breaking REST API
Explore vulnerabilities in JAX-RS implementations and learn techniques to break REST APIs, enhancing your understanding of API security and potential attack vectors.
The Forbidden Image - Security Impact of SVG on the WWW
Explore SVG's security implications, potential vulnerabilities, and protective measures. Learn about malicious SVG examples and a new filtering tool for safer SVG usage on the web.
Locking the Throne Room - ECMA Script 5, a Frozen DOM and the Eradication of XSS
Innovative approach to prevent XSS attacks using ECMA Script 5 features, sealing DOM properties and creating client-side IDS/IPS systems for modern browsers.
Attacking XML Processing
Explore XML security vulnerabilities, from browsers to enterprise solutions. Learn about DTD, SVG, XSLT, XPath, and XML databases, with practical examples and PoC code.
The Game - Life and How to Hack It
Aprende ingeniería inversa y desarrollo de trucos para videojuegos a través de la experiencia de un experto en seguridad, utilizando el MMORPG Rakion como ejemplo práctico.
Build Yourself a SNMP Replacement - And Make SSH Pay for It
Wireless-Netzwerkmanagement ohne SNMP: Python und SSH für effektives Monitoring. Umgehung von Hardware-Einschränkungen und Integration von Splunk und Observium.
Why React Applications Get Hacked in the Real-World
Explore common security pitfalls in React applications and learn practical strategies to prevent XSS vulnerabilities, insecure API usage, and other real-world hacking risks.
Not So Famous Attack Vectors in the World of Smart Contract Security
Explore lesser-known smart contract vulnerabilities, bad coding patterns, and defensive strategies. Learn to identify and protect against overlooked attack vectors in blockchain security.
Server Side Prototype Pollution - Blackbox Detection Without The DoS
Innovative techniques for detecting server-side prototype pollution without causing DoS, including a Burp extension for blackbox testing and identifying JavaScript engines through crafted requests.
Raining CVEs on WordPress Plugins with Semgrep
Leveraging Semgrep to identify vulnerabilities in WordPress plugins, reducing false positives, and automating XSS validation. Includes demos on custom rule creation and the XSSBomb tool.
Web-based Cryptojacking in the Wild
Explore cryptojacking: how browser-based cryptocurrency mining works, its prevalence, profitability, and defense strategies. Gain insights into this parasitic computing phenomenon.
Safe and Secure Drivers in High-Level Languages
Explore writing PCIe drivers in modern languages like Rust and Go, focusing on safety, security, and performance. Learn techniques for user-space implementation and hardware isolation.
MicroPython - Python for Microcontrollers
Explore MicroPython: efficient Python 3 for microcontrollers. Learn about its features, hardware, and diverse applications in IoT, education, and space technology.
Ein Tag hat nur 24±1 Stunden
Fallstricke und Herausforderungen bei der Arbeit mit Datumsangaben und Zeitzonen in der Programmierung. Historische Hintergründe, aktuelle Probleme und zukünftige Entwicklungen in Europa werden beleuchtet.
Foundations for Decentralization - Data with IPLD
Explore IPLD, a data format for decentralized systems. Learn about its format layer, data model, and schema system to simplify building content-addressable storage and immutable data structures.
Treiber in High-Level Programmiersprachen
Netzwerktreiber-Implementierung in verschiedenen Hochsprachen: Vergleich von Sicherheitsfeatures, Performance und Komplexität für Intel 10 Gbit/s Karten in Rust, Go, OCaml, Haskell, C#, Python und Swift.
Easterhegg 2019 - Domain-Automatisierung mit Cryptdomainmgr
Automatisierung von TLS-Zertifikaten, TLSA-Domaineinträgen und DKIM-Schlüsseln mit Cryptdomainmgr. Erneuerung in drei Phasen für lückenlose Sicherheit ohne Ausfallzeiten.
X11 and Wayland - A Tale of Two Implementations
Explore the journey of implementing X11 window manager and Wayland compositor 'hikari', covering design goals, programming choices, libraries, and challenges faced in development.
Pytest-Pacman - Generating Test Data for Libalpm with Python
Explore generating test data for libalpm using Python, focusing on creating local and sync databases for pyalpm testing without relying on pacman or internet fetching.
Breaking Microsoft Edge Extensions Security Policies
Uncover vulnerabilities in Microsoft Edge extensions, exploring permission bypasses, data theft, and security policy breaches. Learn about browser extension security and its impact on user privacy.