Practical Static Analysis for Continuous Application Security
Explore practical static analysis techniques for continuous application security, from simple grep to custom tools, enhancing software development lifecycle with targeted security checks.
Sinking Your Hooks in Applications
Techniques for automatically enhancing application security through code hooking and injection, demonstrated across Java, .NET, and Ruby frameworks without requiring developer intervention.
Building an AppSec Pipeline - Keeping Your Program, and Your Life, Sane
Learn to build an efficient AppSec pipeline to streamline your security program, improve workflow, and enhance overall productivity in application security management.
Struts 2 Must Die - The Life and Inevitable Death of Java’s Spaghettiest Framework
Explore Struts 2's evolution from modern framework to security liability. Dive into OGNL vulnerabilities, architectural flaws, and exploit techniques. Learn why Struts 2 persists in production and its potential for massive damage.
Creating a Buzz - Tales of Building WordPress Honeypots at Scale
Explore the world of WordPress honeypots, their deployment at scale, and surprising insights into black-hat tactics in this intriguing cybersecurity presentation.
36C3 ChaosWest- Programmieren Lernen für Kids - in Minecraft
Entdecke spielerisches Programmieren für Kinder in Minecraft: Erfahrungen, Tipps und Tricks für effektive Workshops mit der beliebten Klötzchenwelt als Lernumgebung.
Emulating Packed Linux Malware Using the Unicorn Emulator Framework - DefCamp - 2019
Explore Linux malware packing, unpacking techniques, and emulation using Unicorn framework. Learn practical skills for malware analysis and reverse engineering in this hands-on cybersecurity talk.
Burping Through Your Cryptography Shield - DefCamp - 2018
Explore techniques for bypassing cryptography shields using Burp Suite, with insights on Java extensions and practical problem-solving approaches in information security.
Clobbering the Cloud - Part 2
Explore advanced cloud security vulnerabilities, including clickjacking, sharing space issues, and custom language platforms. Learn defensive strategies and future directions in cloud protection.
I'm in Your Cloud, Reading Everyone's Emails - Hacking Azure AD via Active Directory
Explore Azure AD vulnerabilities, hacking techniques, and security risks in cloud environments. Learn about AD Connect, crypto magic, and service principles to enhance your cybersecurity knowledge.
How We Made the Badge Before You Showed Up
Explore the creation process of a unique badge, featuring Python programming, accelerometer technology, and software optimization techniques.
SIM Simulator - A Security Assessment Tool for Mobile Communications
Explore SIMulator, a security assessment tool for mobile communications. Learn about SIM cloning, custom key injection, and architecture using STM32F103 and Node.js for realistic SIM emulation and MITM attacks.
Old New Things - An Examination of the Philips TriMedia Architecture
Explore the Philips TriMedia architecture, examining its history, features, and potential vulnerabilities through firmware analysis and hardware exploration.
IoT Processor and Binary Breakdown - The Good the Bad and the Ugly
Explore IoT processor architecture, binary analysis, and firmware vulnerabilities. Gain insights into hardware, Linux deployment, and virtualization for secure IoT development.
When Virtual Hell Freezes Over - Reversing C++ Code
Explore advanced C++ code reversing techniques, focusing on dynamic object creation, vtables, and multiple inheritance. Learn automated methods for efficient analysis.
SyScan360'16 Singapore - Key Value Injections Here
Explore key value injections, their impact on serialization, and implications for React and CouchDB in this technical deep dive.
Reversing IoT - Xiaomi Ecosystem
Explore Xiaomi IoT ecosystem security, firmware extraction, and cloud communication. Learn to modify devices, implement new functions, and gain independence from proprietary cloud services.
Reversing Client Side JavaScript Using the Chrome Dev Tools Protocol
Explore Chrome Dev Tools protocol for JavaScript reversal, bug finding, and vulnerability detection. Learn to modify web app behavior and automate pentesting tasks using Go-based plugins.
Quantifying Memory Unsafety and Reactions to It
Explore memory unsafety in C/C++, its prevalence in major projects, and developer reactions. Learn strategies for addressing this critical issue in modern secure development.
Bringing Usable Crypto to 7 Million Developers
Insights on implementing client-side encryption for databases, covering challenges, solutions, and lessons learned from bringing authenticated encryption to a widely-used NoSQL database.
Ekoparty #UniTalks - Víctor Orozco: Seguridad de Aplicaciones Java/JakartaEE con OWASP Top 10
Ejemplos prácticos de vulnerabilidades OWASP Top 10 en Java/JakartaEE y cómo implementar controles de seguridad robustos en backends y microservicios usando APIs estándar como Jakarta EE security y MicroProfile JWT.