Automated Reverse Engineering Using Lego
Innovative use of Lego robots for automated reverse engineering of smartcard readers, revealing security vulnerabilities through state machine learning and fuzzing techniques.
Space Odyssey - An Experimental Software Security Analysis of Satellites
Explore experimental software security analysis techniques for satellites, uncovering vulnerabilities and discussing potential implications for space-based systems and infrastructure.
Detection of Inconsistencies in Privacy Practices of Browser Extensions
Explore techniques for identifying discrepancies in browser extension privacy practices, enhancing user data protection and online security awareness.
Creativity, Intelligence, and Security Analyst Thinking Modes
Explore analyst thinking modes, creativity, and intelligence in cybersecurity. Learn about divergent and convergent thinking, problem-solving techniques, and research methodologies for effective security analysis.
Getting the Most out of Freq and Domain Stats
Explore advanced techniques for leveraging Freq and Domain_Stats tools in cybersecurity analysis, enhancing threat detection and network monitoring capabilities.
Using ELSA for Fun & Profit
Explore advanced ELSA features for security analysis, including Elasticsearch integration, improved syslog-ng, containerization, and new visualization tools like Ankey and geo mapping.
Should You Be Afraid of Hands-On Payment Devices?
Unveiling vulnerabilities in Point of Sale terminals: from anti-tampering mechanisms to cloning. Explore the lifecycle of popular devices and the hacking techniques used to compromise payment security.
The Ransomware Protection Full Of Holes
Exposé des failles de la protection contre les ransomwares de Windows, démonstration de méthodes de contournement et d'attaques à distance, avec vidéos à l'appui.
Security Analysis of CHERI ISA
Explore CHERI ISA's memory-protection features for C/C++, its security guarantees, and how it enhances memory safety in legacy code through architectural and compiler innovations.
A Fuzzing and Protocol Analysis Case-Study of DNP3
Explores vulnerabilities in DNP3, a key SCADA protocol for power systems, revealing design flaws and implementation gaps. Discusses fuzzing results, CVEs, and analyzes the protocol's security addendum.
Security Analysis of the MLS Key Derivation
Explore the security aspects of MLS key derivation, focusing on analysis techniques and potential vulnerabilities in this cryptographic process.
BadUSB-C - Revisiting BadUSB with Type-C
Explore the evolution of BadUSB attacks with USB Type-C, examining new vulnerabilities and potential security risks in modern devices. Learn about cutting-edge offensive technologies and their implications.
Fingerprinting the Fingerprinters - Learning to Detect Browser Fingerprinting Behaviors
Explore techniques to detect and analyze browser fingerprinting behaviors, enhancing online privacy protection and understanding digital tracking methods.
Unwrapping the Truth - Analysis of Mobile Application Wrapping Solutions
Explore mobile application wrapping solutions for BYOD, analyzing their security claims, implementation, and vulnerabilities in iOS and Android environments.
Hacking the Wireless World with Software Defined Radio - 2.0
Explore wireless hacking using software-defined radio. Learn to analyze, reverse engineer, and exploit RF signals in various systems, from pagers to satellites, using open-source tools and affordable hardware.
Unveiling the Open Source Visualization Engine for Busy Hackers
Open source engine for creating advanced data visualizations, enabling visual learners to interpret complex data sets efficiently. Useful for security practitioners, incident responders, and malware researchers.
Security Analysis of Microsoft Encrypted File System - EFS
Comprehensive security analysis of Microsoft's Encrypted File System, exploring vulnerabilities and potential exploits in EFS implementation.
Shuffle Up and Deal - Analyzing the Security of Automated Card Shufflers
Explore security vulnerabilities in automated card shufflers used in casinos, including communication protocols, hardware analysis, and potential exploits, with insights on improving gambling security.
Reversing, Breaking, and Fixing the French Legislative Election E-Voting Protocol
Análisis de seguridad del protocolo de voto electrónico utilizado en las elecciones legislativas francesas de 2022, revelando vulnerabilidades, proponiendo soluciones y extrayendo lecciones para futuras implementaciones.
Introduction to Security Onion 2.4
Explore Security Onion 2.4's features and capabilities for network security monitoring, threat hunting, and incident response in this comprehensive overview.
Its Not Easy Being Purple
Explore the challenges and strategies of purple team cybersecurity with insights from industry experts on effective defense and offense integration.