Half Measures and Full Compromise: Exploiting Microsoft Exchange PowerShell Remoting
Explore Microsoft Exchange PowerShell Remoting vulnerabilities and exploitation techniques for enhanced cybersecurity awareness and defense strategies.
One SMS to Root Them All: Exposing Critical Threats in Connected Devices
Explore critical vulnerabilities in connected devices through SMS exploitation, uncovering potential threats to millions of users worldwide.
Unexpected Intrusion Testing Results in SAP Systems - Critical Vulnerabilities and Exploits
Unveiling critical vulnerabilities in SAP Start Service, from local to remote exploits. Explores memory corruption and OS command injection leading to root-level RCE, with live demo and recommendations.
Microsoft Outlook CVE-2024-21413 Vulnerability - Protecting Your Credentials
Explore the critical CVE-2024-21413 vulnerability in Microsoft Outlook, understanding its potential for credential compromise and remote code execution. Learn protective measures and stay informed.
AEM Hacker - Approaching Adobe Experience Manager Webapps in Bug Bounty Programs
Explore techniques for hacking Adobe Experience Manager webapps, including misconfigurations, vulnerabilities, and automation tools. Learn methodologies for bug bounty programs targeting AEM deployments.
Breaching AWS Through Shadow Resources - Critical Vulnerabilities and Security Implications
Uncover critical AWS vulnerabilities and security insights through real-world examples of shadow resource exploitation, featuring detection methods, privilege escalation techniques, and best practices for cloud security.
Serverless Infections - Malware in Serverless Computing Environments
Explore security risks in serverless computing, including potential malware infections and data exfiltration. Learn about a novel RCE attack and best practices for securing serverless environments.
Attacking JSON - Vulnerabilities in Popular Parsers
Explore JSON parser vulnerabilities in .NET and Java, including RCE risks. Learn about attack techniques, vulnerable formats, and mitigation strategies for safer serialization implementations.
Hacking Web Server Apps for iOS - Security Risks and Vulnerabilities
Explore iOS web server app vulnerabilities, from XSS to potential RCE. Learn risks, attack vectors, and implications for both jailbroken and non-jailbroken devices in this eye-opening security analysis.
My Terrible Roommates - Discovering the FlowFixation Vulnerability and the Risks of Sharing a Cloud Domain
Unveiling FlowFixation: High-severity cloud vulnerability affecting shared domains. Explore risks, prevention methods, and the importance of the public suffix list in cloud security.
Fuzzing at Mach Speed: Uncovering IPC Vulnerabilities on MacOS
Explore macOS IPC security, focusing on Mach message handlers. Learn about custom fuzzing techniques to uncover vulnerabilities in privileged RPC-like functions, potentially leading to sandbox escapes and privilege escalations.
Exploiting Jenkins CVE-2024-23897 - Remote Code Execution Step-by-Step Tutorial
Learn to replicate Jenkins Remote Code Execution vulnerability CVE-2024-23897. Set up Vulhub, use Nuclei template, and exploit the flaw step-by-step for educational purposes in cybersecurity.
Scanning IPv4 for Exposed Data and Vulnerable Databases
Exploring IPv4 scans to uncover exposed databases, revealing vulnerabilities in popular key-value stores and the risks of data theft and remote code execution in insecure setups.
Hands-on Hacking Kubernetes and Ways to Prevent It
Hands-on workshop exploring Kubernetes vulnerabilities and prevention strategies. Demonstrates remote code execution exploit and teaches mitigation techniques for enhanced container security.
Hardening Against Kubernetes Hacks - Live Demo
Explore a real-world Kubernetes cluster takeover through remote code execution, and learn effective mitigation strategies to enhance your system's security against such threats.
Shadow Vulnerabilities in AI/ML Data Stacks - What You Don't Know Can Hurt You
Explore hidden security risks in AI/ML data stacks, focusing on open-source vulnerabilities, RCE issues, and security anti-patterns. Learn about new checkpoint formats and runtime-based detection methods using eBPF.
ICEFALL - Revisiting A Decade Of OT Insecure-By-Design Practices
Revisiting insecure-by-design practices in OT devices, highlighting persistent security issues across industries and critical infrastructure, with technical deep-dives and implications for risk management.
Snow Crashing Virtual Reality - 2019 Edition
Exploring security flaws in VR games leading to remote code execution, highlighting privacy concerns and the need for developers to prevent abuse in online AR/VR communities.
ElectroVolt - Pwning Desktop Apps Built On Electron
Explore vulnerabilities in Electron-based desktop apps, including novel attack vectors for remote code execution, with demonstrations on popular applications like Discord and VSCode.
Careful Who You Trust - Compromising P2P Cameras At Scale
Explore vulnerabilities in P2P protocols used by smart cameras, including Kalay Platform analysis, device-specific exploits, and remote code execution demonstrations. Learn about IoT security risks and mitigation strategies.
Dangling Packages Leading to RCE
Explore dependency confusion attacks and how unclaimed packages in project files can lead to remote code execution. Learn about real-world vulnerabilities and mitigation strategies.