The Art of Bit Banging - Gaining Full Control of Nearly Any Bus Protocol
Learn to manipulate bus protocols through bit banging techniques, gaining control over hardware communication and exploring potential security implications in embedded systems.
File Structures - Another Binary Exploitation Technique
Exploring FILE structure exploitation in Glibc to bypass modern OS protections, demonstrating remote code execution techniques and File Stream Oriented Programming.
Get to the Money - Hacking PoS and PoP Systems
Exploración detallada de vulnerabilidades en sistemas de punto de venta, demostrando vectores de ataque y discutiendo la seguridad de sistemas POS modernos, con énfasis en SAP POS.
Exploiting Excel Online
Explore Excel Online vulnerabilities, focusing on integer overflow in fnConcatenate formula. Learn about chaining formulas for remote code execution and potential security implications.
Breaking Parser Logic - Take Your Path Normalization Off and Pop 0days Out
Explore path normalization vulnerabilities, their impact on web security, and techniques to exploit them for bypassing access controls and achieving remote code execution.
How I Used a JSON Deserialization 0day to Steal Your Money on the Blockchain
Explore a JSON deserialization vulnerability in Fastjson, its exploitation for remote code execution, and implications for blockchain security.
The Perl Jam 2 - The Camel Strikes Back
Exploring critical vulnerabilities in Perl's core modules and CGI frameworks, demonstrating fundamental language issues through 0-days, and challenging the "developer's fault" narrative.
Hey Man, Have You Forgotten to Initialize Your Memory?
Exploiting uninitialized memory in 64-bit IE to bypass ASLR, CFG, and EPM sandbox. Techniques for remote code execution and privilege escalation on Windows 8.1 demonstrated through Pwn2Own contest example.
Hackproofing Oracle EBusiness Suite
Explore vulnerabilities in Oracle eBusiness Suite and learn effective strategies to secure systems against potential attacks, including remote code execution and SQL injection.
Exploiting IPC With New Desynchronization Primitives
Exploración de vulnerabilidades críticas en SAP, demostrando técnicas avanzadas de explotación HTTP y desincronización para comprometer sistemas empresariales. Incluye demostraciones prácticas y análisis de impacto en la seguridad global.
How MySQL Servers Can Attack YOU
Novel attack vector using compromised MySQL servers to target clients, demonstrating remote code execution vulnerabilities in MySQL tools and libraries, including a zero-day exploit bypassing security patches.
Nakatomi Space - Lateral Movement as L1 Post-Exploitation in OT
Explore lateral movement techniques in OT networks, focusing on vulnerabilities in L1 devices. Learn about BPCS/SIS architectures, exploit chains, and hardening strategies to enhance industrial control system security.
SeasCoASA - Exploiting A Small Leak In A Great Ship
Exploiting vulnerabilities in Cisco ASA firewalls: New techniques to bypass protection mechanisms, heap exploitation strategies, and disclosure of a 0-day vulnerability affecting major ASA versions.
Exploiting GLIBC - Hacking Everything
Exploración detallada de la vulnerabilidad CVE-2015-7547 en glibc, demostrando técnicas de explotación remota y su impacto en diversos productos de software compilados con versiones antiguas.
Exploiting 64 Bit IE on Windows 8.1 - The Pwn2Own Case Study
Detailed exploration of vulnerabilities and exploit techniques used to compromise 64-bit Internet Explorer on Windows 8.1, including ASLR & CFG bypass and sandbox escape, as demonstrated at Pwn2Own 2015.
DevOops, I Did It Again
Explore security vulnerabilities in DevOps tools and practices, including AWS, Chef, Puppet, and Jenkins. Learn about misconfigurations and potential risks in fast-paced development environments.
802.1x and Beyond
Dissecting IEEE 802.1x and related protocols, exploring vulnerabilities in popular systems, and demonstrating remote code execution over 802.11 wireless using WPA Enterprise.
The New Page of Injections Book - Memcached Injections
Explore memcached injection vulnerabilities across popular web platforms, learning attack techniques, potential impacts, and post-exploitation strategies for improved application security.
Huawei - From China with Love
Exploring vulnerabilities in 3G/4G USB modems, focusing on Huawei devices. Discusses potential for widespread infection and botnet creation through software exploits.
Java Every-Days - Exploiting Software Running on 3 Billion Devices
Explore Java vulnerabilities, exploitation trends, and security measures in this Black Hat talk. Gain insights into common weaknesses, attack surfaces, and Oracle's responses to protect 3 billion devices.
Hunt for Red October
Explore Windows networking internals, reverse engineering techniques, and recent vulnerabilities like CVE-2023-23415 in this insightful talk on uncovering security flaws in the Windows networking stack.