The Internals of Veilid - A New Decentralized Application Framework
Explore the architecture and capabilities of Veilid, an open-source P2P framework enabling secure messaging and decentralized applications through private routing, strong encryption, and cross-platform compatibility.
New Isn't Always Novel - Finding Basic Vulnerabilities in Enterprise Software
Discover how basic vulnerabilities in enterprise software led to a successful Pwn2Own contest entry, featuring a command injection exploit in Lexmark printers and practical security insights.
Hacking War Stories: From Prison Systems to Tech Companies - A Series of Unfortunate Events
Dive into real-world hacking adventures, from prison systems to major tech companies, exploring identification, exploitation techniques, and potential impact across different organizational contexts.
An Audacious Plan to Halt the Internet's Enshittification
Explore how internet platforms evolve from user-friendly to exploitative, and discover practical solutions including antitrust measures, privacy laws, and user empowerment tools to combat digital degradation.
Smashing the State Machine: Advanced Web Race Condition Attacks
Discover advanced web race-condition attack techniques, from limit-overrun exploits to state machine manipulation, with practical methodologies and tools for identifying and exploiting vulnerabilities.
Physical Attacks Against Smartphones: Android Security Vulnerabilities and Exploits
Discover physical attack vulnerabilities in Android smartphones, from Recovery mode exploits using SD cards to USB stack weaknesses in secondary bootloaders for achieving root access and code execution.
Game Changing Advances in Windows Shellcode Analysis Using SHAREM Framework
Discover groundbreaking advances in Windows shellcode analysis through SHAREM framework, offering enhanced emulation, complete code coverage, and superior disassembly capabilities for security professionals.
Retro Exploitation - Vintage Computing as a Vulnerability Research Playground
Explore vulnerability research and exploit development through vintage computing, focusing on the Commodore Amiga platform and practical demonstrations of retro software exploitation techniques.
Securing Critical Versions of Your Reality - Extended Reality in Critical Infrastructure
Explore how Extended Reality (XR) technology impacts critical infrastructure security and operations through expert insights on implementation, risks, and protective measures.
Mapping IDs and Monitoring User Presence in the Azure Ecosystem
Uncover powerful techniques for large-scale Azure user enumeration, focusing on OneDrive, Teams, and Graph vulnerabilities to map organizational relationships and monitor user presence without authentication.
Breaking Microsoft Teams and SharePoint Through Migration APIs
Uncover critical security vulnerabilities in Microsoft SharePoint Online's migration APIs and learn how threat actors can exploit these features to compromise Microsoft 365 services and Azure Active Directory.
Malware Design: Abusing Legacy Microsoft Transports and Session Architecture
Explore advanced malware design techniques and covert communication frameworks, focusing on Windows architecture exploitation and maintaining persistent access while evading detection systems.
Vacuum Robot Security and Privacy: Preventing Data Collection from Smart Home Devices
Explore security vulnerabilities in smart vacuum robots and learn practical techniques to protect your privacy while maintaining control over these AI-enabled devices.
Hacking Power Management in Data Centers - Security Vulnerabilities and Exploits
Delve into data center power management security, exploring vulnerabilities in PDUs and DCIM systems while learning critical infrastructure protection strategies and attack vectors.
Software Liability and Cybersecurity Policy - Shifting Development Practices
Explore software liability policies and their impact on cybersecurity through interactive legal exercises, focusing on Biden-Harris Strategy's Pillar 3 and future regulatory implications.
Backdoor in the Core - Altering Intel x86 Instruction Set at Runtime
Dive into groundbreaking research on Intel CPU microcode manipulation, exploring techniques for persistent modifications and potential security implications through microcode backdoors in x86 instruction sets.
Automatic Exploitation of TLS Certificate Validation Vulnerabilities
Explore TLS certificate validation vulnerabilities and their automated exploitation using certmitm, featuring real-world attacks on iOS and Windows 11 systems.
Hacking PBX and UC Systems: Attack Surface Analysis and Vulnerability Discovery
Dive into enterprise PBX/UC system vulnerabilities, exploring attack surfaces, Java Runtime exploitation, PHP decryption, and shell access techniques in communication infrastructure.
Exploiting Cloud Connectivity to Compromise Network-Attached Storage Devices
Uncover critical security vulnerabilities in NAS devices through cloud connectivity exploitation, focusing on WD and Synology systems' authentication weaknesses and remote access vulnerabilities.
Attacking and Securing the Google Pixel Modem - Security Analysis and Vulnerabilities
Dive into mobile security as Android Red Team reveals their offensive evaluation techniques and findings on Pixel device modems, focusing on baseband vulnerabilities and protective measures.
Digital Twinning with Extended Reality for Signal Analysis
Explore how Idaho National Labs leverages XR technologies and digital twinning to revolutionize data visualization, signal analysis, and autonomous operations in nuclear and security missions.