Analysis to Remote Root 0day in a SSL-VPN Appliance
Análisis detallado de vulnerabilidades en un dispositivo SSL-VPN líder, revelando fallas de seguridad y demostrando la explotación para obtener acceso root remoto no autenticado.
Static Binary Analysis - The Essentials
Dive into reverse engineering and static malware analysis essentials with Igor Kuznetsov. Learn visual inspection, disassembly techniques, and structure analysis using IDA Pro and Ghidra.
Chamois - The Most Impactful Android Botnet of 2018
Explore the sophisticated Chamois Android botnet, its technical complexity, anti-detection techniques, and impact on ad fraud. Learn about its infrastructure and strategies to combat this significant threat.
Changing the Physics of Defense
Explore modern cybersecurity trends reshaping defense strategies, including cloud storage, big data analytics, information sharing, and advanced skillsets to counter evolving threats.
The IoT Hacker's Toolkit
Explore essential hardware and software tools for IoT security assessment, covering interfaces, analysis techniques, and skill-building for embedded device evaluation.
An Effective Approach to Software Obfuscation
Explore effective software obfuscation techniques, their limitations, and a novel approach to enhance code protection against reverse engineering and analysis.
Redback - Advanced Static Binary Injection
Explore advanced static binary injection techniques to insert external code into executables, modifying run-time behavior. Learn from experts about this powerful yet underutilized method.
Demystify Today's Binary Disassembling and How Modern ABI Makes it Easier
Explore modern binary disassembling techniques and tools, understanding their strategies, challenges, and how modern ABI enhances the process. Learn about evaluation results and new approaches in this field.
Dive into Apple IO80211FamilyV2
Explore Apple's IO80211FamilyV2 Wi-Fi architecture, its features, and potential vulnerabilities. Learn about reverse engineering, attack surfaces, and the latest security concerns in macOS Catalina.
Reversing the Root - Identifying the Exploited Vulnerability in 0-Days Used In-The-Wild
Explore techniques for identifying root cause vulnerabilities in exploited 0-days, including binary patch diffing, exploit minimization, and reverse engineering, to enhance cybersecurity analysis and threat mitigation.
Superman Powered by Kryptonite - Turn the Adversarial Attack into Your Defense Weapon
Explore how AI-powered attacks on security mechanisms can be turned into defensive strategies, focusing on adversarial examples and innovative countermeasures in cybersecurity.
Hardware Security Module - Executing Unsigned Code in HSM TEE
Explore a novel attack on HSM digital signature verification, enabling execution of unsigned code in protected environments. Insights applicable to similar systems.
Blockchain Autopsies - Analyzing Ethereum Smart Contract Deaths
Explore Ethereum smart contract vulnerabilities, reverse engineering techniques, and new tools for analyzing blockchain attacks through real-world examples and practical demonstrations.
Reversing a Japanese Wireless SD Card - From Zero to Code Execution
Discover how to reverse engineer a wireless SD card's firmware using open-source tools, uncovering its architecture and operating system to achieve code execution.
Miasm - Reverse Engineering Framework
Explore Miasm's reverse engineering capabilities, from basic framework to symbolic emulation and malware analysis tools. Learn disassembly, code emulation, and advanced techniques for tackling complex software.
Arm IDA and Cross Check - Reversing the Boeing 787's Core Network
Uncover vulnerabilities in Boeing 787's Core Network through reverse engineering, revealing security flaws and their implications for aircraft systems and passenger safety.
Container Attack Surface Reduction Beyond Name Space Isolation
Explore techniques to reduce container vulnerabilities by analyzing and removing unnecessary dependencies, binaries, and permissions, enhancing security beyond namespace isolation.
ARTist - A Novel Instrumentation Framework for Reversing and Analyzing Android Apps and the Middleware
Explore Android Runtime security with ARTist, a novel instrumentation framework for analyzing apps and middleware. Learn deployment, modules, and creation techniques.
Decompiler Internals - Microcode
Explore the intermediate language used in Hex-Rays Decompiler, understanding its simplicity and power in representing complex programs.
Pre-built JOP Chains with the JOP ROCKET - Bypassing DEP without ROP
Explore Jump-oriented Programming (JOP) as an alternative to ROP for code-reuse attacks. Learn about the JOP ROCKET tool for creating pre-built JOP chains to bypass DEP without ROP.
Alarm.DISARM - Remotely Exploiting & Disarming Popular Physical Security System from Public Internet
Explore remote code execution vulnerabilities in physical security systems, learning to exploit and disarm alarms through reverse engineering and network protocol analysis.