Breaking Firmware Trust From Pre-EFI - Exploiting Early Boot Phases
Exploración de vulnerabilidades en fases tempranas de arranque, evolución de mitigaciones de firmware y nuevos ataques en módulos de evaluación de plataformas Intel desde una perspectiva ofensiva.
Vehicle Immobilization Revisited
Uncovering vulnerabilities in modern vehicle immobilization systems through analysis of ECM-BCM authentication protocols, revealing potential security risks in various car models.
Mehr schlecht als Recht - Grauzone Sicherheitsforschung
Rechtliche Herausforderungen und Grauzonen bei der IT-Sicherheitsforschung: Ein Erfahrungsbericht über Reverse Engineering, Urheberrechtsfragen und den Umgang mit Herstellern bei der Aufdeckung von Schwachstellen.
Viva la Vita Vida
Detailing hardware and software hacking techniques used to breach the PlayStation Vita's security, including reverse engineering, fault injection, and side-channel analysis on its proprietary architecture.
Inside the AMD Microcode ROM
Reverse engineering AMD CPU microcode: mapping physical to virtual addresses, developing custom microcode programs, and implementing defensive measures. Includes open-source framework and hardware setup details.
What the Flag is CTF?
Explore the world of Capture The Flag (CTF) competitions: their history, types of challenges, and how to get started. Learn about this exciting way to improve your cybersecurity skills and join a global community.
SiliVaccine - North Korea's Weapon of Mass Detection
Explore North Korea's national antivirus software, SiliVaccine. Uncover its architecture, development process, and hidden features through reverse engineering, revealing insights into DPRK's secretive software industry.
Bahn API Chaos
Analyse des API de la Deutsche Bahn : incohérences, défis et solutions créatives. Exploration des anomalies et réflexion sur leurs causes potentielles.
Dissecting the AMD Platform Security Processor
Explore AMD's Platform Security Processor: its role in system startup, runtime services, and memory access. Gain insights into reverse-engineering efforts and potential security implications.
Witchcraft Compiler Collection - Towards Programs Self Awareness
Innovative reverse engineering approach: undoing linker work to produce relocatable files, enabling binary reflection, scripting, and automated API prototyping for enhanced code analysis and exploitation.
IoT on Easy Mode - Reversing Embedded Devices
Discover the ease of embedded device hacking in IoT, exploring techniques beyond x86/x64 architectures. Learn essential tools and justifications for specialized equipment in this insightful security talk.
CTF Writeup - Log 'em All
Detailed walkthrough of a challenging Hacking/Reverse Engineering CTF challenge inspired by a Pokemon Red bug, with step-by-step instructions for setup and execution.
A Look at Jython-Enhanced Reverse Engineering with Ghidra
Explore Jython scripting in Ghidra for efficient malware analysis, using real-world examples to enhance reverse engineering techniques and streamline the process of analyzing obfuscated binaries.
Cyber Necromancy - Resurrecting the Dead
Explore reverse engineering of game servers and network protocols to revive Metal Gear Online. Learn techniques from packet logs to client code disassembly in this cybersecurity deep dive.
Hacking an Internet Enabled Lagomorph
Explore ARM exploitation, reverse engineering, and vulnerability analysis through the lens of hacking an internet-enabled rabbit toy, uncovering authentication bypasses and remote code execution bugs.
Inside .NET Smart Card Operating System
Explore reverse engineering of .NET smart card operating systems, focusing on code analysis and communication protocols to uncover vulnerabilities and test security measures.
For the Love of Money - Finding and Exploiting Vulnerabilities in Mobile Point of Sales Systems
Explore vulnerabilities in mobile point-of-sale systems, including MitM attacks, arbitrary code injection, and firmware exploitation. Learn to identify weaknesses and conduct security assessments in payment technologies.
GO Forth And Reverse
Explore Go language reverse engineering challenges, tool limitations, and strategies for function recovery and string analysis. Learn heuristics and resources for effective Go binary analysis.
I'm a Hunter! Cyber Intelligence in the New-ish Frontier
Explore cyber intelligence techniques, from malware analysis to hacker mindset, with real-world examples and practical skills for navigating the digital frontier.
Cisco ASA Episode 2 - Striking Back - Internals and Mitigations
Explore Cisco ASA internals, reverse engineering techniques, and custom tools for exploit development. Gain insights into vulnerability analysis and mitigation strategies for network security professionals.
Privacy Without Monopoly - Beyond Feudal Security
Exploring the tension between privacy and monopoly in tech, advocating for interoperability as a solution to enhance security without compromising user rights or enabling corporate dominance.