Hacking Power Management in Data Centers - Security Vulnerabilities and Exploits
Delve into data center power management security, exploring vulnerabilities in PDUs and DCIM systems while learning critical infrastructure protection strategies and attack vectors.
Nine Years of Overlooked MikroTik Pre-Authentication Remote Code Execution Vulnerabilities
Delve into RouterOS's overlooked attack surfaces and discover critical pre-auth RCE vulnerabilities that affected MikroTik devices for 9 years, with insights on detection methodology and security patterns.
Exploiting Cloud Connectivity to Compromise Network-Attached Storage Devices
Uncover critical security vulnerabilities in NAS devices through cloud connectivity exploitation, focusing on WD and Synology systems' authentication weaknesses and remote access vulnerabilities.
Terminally Owned - 60 Years of Terminal Escape Code Vulnerabilities
Explore terminal security vulnerabilities across platforms, from ASCII's escape character origins to modern exploit techniques, revealing critical remote code execution risks and defense strategies.
Top War Stories from Bug Bounty Hunting - High-Severity Exploits and Discoveries
Dive into real-world bug bounty hunting experiences, exploring high-severity vulnerabilities worth $10k-$60k, from simple RCE exploits to complex PII leakages, with detailed technical insights and lessons learned.
Exploiting the Unexploitable - Advanced JavaScript Vulnerability Chains in Kibana
Dive into advanced exploitation techniques for JavaScript vulnerabilities, focusing on Prototype Pollution attacks and RCE chains through real-world Kibana Bug Bounty examples and defense strategies.
SQL Injection Isn't Dead: Smuggling Queries at the Protocol Level
Explore advanced SQL injection techniques through protocol-level query smuggling, revealing how attackers can bypass security measures and exploit database connections for authentication breaches and data theft.
QuickShell: Remote Code Execution Attack Chain Analysis in Quick Share
Uncover critical security vulnerabilities in Google's Quick Share protocol, including an RCE attack chain, HTTPS MITM techniques, and protocol analysis for both Windows and Android platforms.
Outlook Unleashing RCE Chaos: Understanding CVE-2024-30103
Dive into the critical Outlook security vulnerabilities, exploring RCE exploits through COM objects, NTLM leaks, and essential mitigation strategies for enterprise protection.
What to Expect When You're Exploiting - Zero-Day Vulnerabilities in Baby Monitors and Wi-Fi Cameras
Uncover critical security vulnerabilities in Wi-Fi cameras and baby monitors, exploring attack surfaces, privacy issues, and zero-day exploits while learning practical remediation strategies for IoT devices.
Infrastructure as Remote Code Execution: How to Abuse Terraform to Elevate Access
Explore security risks of Terraform, demonstrating exploitation techniques for privilege escalation and unauthorized access. Learn practical recommendations for securing cloud infrastructure deployments.
Infrastructure as Remote Code Execution: How to Abuse Terraform
Explore security risks in Terraform, including privilege escalation and data exfiltration. Learn attack scenarios and practical recommendations for securing cloud infrastructure deployments.
Securing the Future of Ingress-NGINX
Discover essential security improvements and future roadmap for Ingress-NGINX, including hardening guidelines, default security features, and transition plans to Gateway API implementation.
Breaking Into an O-RAN 5G Indoor Base Station - Security Analysis and Vulnerabilities
Uncover critical security vulnerabilities in O-RAN 5G indoor base stations through detailed analysis of hardware, software, and services, revealing remote code execution risks and standard deviations.
Basilisk: Remote Code Execution by Laser Excitation of P-N Junctions Without Insider Assistance
Discover how laser-based attacks can manipulate P-N junctions to achieve remote code execution and system interference, exploring practical demonstrations and potential countermeasures for hardware security.
Black Hat USA 2025
Black Hat USA 2025
Black Hat USA 2023
Black Hat USA 2023
Black Hat Asia 2025
Black Hat Asia 2025
Black Hat Europe 2024
Black Hat Europe 2024